Lucene search
+L

1 matches found

RubySec
RubySec
added 2021/08/23 12:00 a.m.10 views

Widget feature vulnerability allowing to execute JavaScript code using undo functionality

Affected packages The vulnerability has been discovered in Widget plugin if used alongside Undo feature. Impact A potential vulnerability has been discovered in CKEditor 4 Widget package. The vulnerability allowed to abuse undo functionality using malformed widget HTML, which could result in...

7.6CVSS7AI score0.01192EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder