CVE-2025-6674

The Drupal CKEditor5 Youtube video integration plugin is vulnerable to Cross-Site Scripting (XSS) due to improper input neutralization. Specifically, the module fails to sufficiently validate iframe sources when a user embeds a video via the CKEditor YouTube integration. This vulnerability affect...