Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:1475
HistoryFeb 11, 2015 - 4:10 p.m.

Cross-Site Scripting (XSS)

2015-02-1116:10:59
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6

0.002 Low

EPSS

Percentile

56.9%

CKEditor is vulnerable to cross-site scripting. A remote attacker is able to inject arbitrary Javascript into a victim’s browser to steal session tokens or perform unwanted actions on behalf of the user.

0.002 Low

EPSS

Percentile

56.9%