CVE-2024-13245

The Drupal CKEditor 4 LTS - WYSIWYG HTML editor is vulnerable to Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. This issue affects versions 1.0.0 through 1.0.0 (noted as before 1.0.1). Attackers with permission to access the CKEditor instance can in...