Title

CKEditor Cross-Site Scripting Vulnerability (Cat I impact)

Discussion

CKEditor has addressed a vulnerability in CKeditor. CKEditor (formerly FCKeditor) is an HTML text editor used in web pages. To exploit this vulnerability, a remote attacker would entice a user to follow a malicious URI sent via email. If successfully exploited, this vulnerability would allow a remote attacker to perform cross-site scripting attacks and compromise the affected system.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-53503

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.