Ckeditor 5 Link

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2018-11093 npm MEDIUM PATCH This Month

Cross-site scripting (XSS) vulnerability in the Link package for CKEditor 5 before 10.0.1 allows remote attackers to inject arbitrary web script through a crafted href attribute of a link (A) element. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Ckeditor 5 Link

NVD GitHub

CVSS 3.1

6.1

EPSS

1.0%

CVE-2018-11093 npm

EPSS 1% CVSS 6.1

MEDIUM PATCH This Month

Cross-site scripting (XSS) vulnerability in the Link package for CKEditor 5 before 10.0.1 allows remote attackers to inject arbitrary web script through a crafted href attribute of a link (A) element. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Ckeditor 5 Link

NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy