Vulnerabilities affecting this package (1)
| Vulnerability |
Summary |
Fixed by |
VCID-s8u8-xbdk-87dj
Aliases:
CVE-2021-33829
GHSA-rgx6-rjj4-c388
|
ckeditor4 vulnerable to cross-site scripting
A cross-site scripting (XSS) vulnerability in the HTML Data Processor in CKEditor 4 4.14.0 through 4.16.x before 4.16.1 allows remote attackers to inject executable JavaScript code through a crafted comment because `--!>` is mishandled.
|
There are no reported fixed by versions.
|
Vulnerabilities fixed by this package (0)
| Vulnerability |
Summary |
Aliases |
|
This package is not known to fix vulnerabilities.
|