Image Uploader And Browser For Ckeditor

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2019-19502 Dec 02, 16:15 CRITICAL PATCH Act Now

Code injection in pluginconfig.php in Image Uploader and Browser for CKEditor before 4.1.9 allows remote authenticated users to execute arbitrary PHP code. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

PHP RCE Code Injection Image Uploader And Browser For Ckeditor

NVD GitHub

CVSS 3.1

9.8

EPSS

1.9%

CVE-2019-19502

EPSS 2% CVSS 9.8

CRITICAL PATCH Act Now

Code injection in pluginconfig.php in Image Uploader and Browser for CKEditor before 4.1.9 allows remote authenticated users to execute arbitrary PHP code. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

PHP RCE Code Injection +1

NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy