CVE-2023-4771

CVE-2023-4771 is a CKEditor XSS vulnerability affecting CKEditor 4.x (notably versions 4.15.1 and earlier) where an attacker could inject JavaScript via the /ckeditor/samples/old/ajax.html sample to access an authorized user’s data. The CVSS base score is 6.1 (CVSSv3.1: AV:N/AC:L/PR:N/UI:R/S:C/C:...