CVE-2024-37888

The CVE-2024-37888 issue affects the Open Link CKEditor plugin, impacting users of versions prior to 1.0.5. The vulnerability is a cross-site scripting (XSS) flaw that enables JavaScript execution via abuse of the link href attribute in the plugin’s open link functionality. Remediation per source...

CVE-2024-45400

CVE-2024-45400 affects the ckeditor-plugin-openlink plugin for CKEditor. Versions prior to 1.0.7 allow executing JavaScript by abusing the link href attribute, enabling cross-site scripting. The fix is available in version 1.0.7 and later. Affected users should update to 1.0.7+ or apply vendor gu...