Cross-site Scripting (XSS)

ckeditor is vulnerable to cross-site scripting XSS attacks. The vulnerability exists due to the lack of sanitization on the value entered in the CKEditor source area, allowing XSS attacks to occur when switched to WYSIWYG mode...