Lucene search

K

Veracode Vulnerability DatabaseVERACODE:47718

HistoryJun 24, 2024 - 10:18 a.m.

Cross Site Scripting (XSS)

2024-06-2410:18:19

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

1

cross site scripting

drupal

ckeditor

wysiwyg editing

privileged admins

6.3 Medium

AI Score

Confidence

High

drupal/drupal is vulnerable to Cross-Site Scripting (XSS). The vulnerability is due to the issues in the CKEditor library when configured for WYSIWYG editing, allowing attackers to target users with access to CKEditor, including privileged site admins.

6.3 Medium

AI Score

Confidence

High