{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/44703?format=json","vulnerability_id":"VCID-2mmd-x6ge-fuaw","summary":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')\nCKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A cross-site scripting vulnerability has been discovered affecting Iframe Dialog and Media Embed packages. The vulnerability may trigger a JavaScript code after fulfilling special conditions: using one of the affected packages on a web page with missing proper Content Security Policy configuration; initializing the editor on an element and using an element other than `<textarea>` as a base; and destroying the editor instance. This vulnerability might affect a small percentage of integrators that depend on dynamic editor initialization/destroy mechanism. A fix is available in CKEditor4 version 4.21.0. In some rare cases, a security fix may be considered a breaking change. Starting from version 4.21.0, the Iframe Dialog plugin applies the `sandbox` attribute by default, which restricts JavaScript code execution in the iframe element. To change this behavior, configure the `config.iframe_attributes` option. Also starting from version 4.21.0, the Media Embed plugin regenerates the entire content of the embed widget by default. To change this behavior, configure the `config.embed_keepOriginalContent` option. Those who choose to enable either of the more permissive options or who cannot upgrade to a patched version should properly configure Content Security Policy to avoid any potential security issues that may arise from embedding iframe elements on their web page.","aliases":[{"alias":"CVE-2023-28439"},{"alias":"GHSA-vh5c-xwqv-cv9g"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/64359?format=json","purl":"pkg:npm/ckeditor4@4.21.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2x4x-gkb7-u3b8"},{"vulnerability":"VCID-3ze6-frgs-bqc6"},{"vulnerability":"VCID-dhra-m93g-tucw"},{"vulnerability":"VCID-zpr3-15yc-gfcn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/ckeditor4@4.21.0"}],"affected_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/57025?format=json","purl":"pkg:npm/ckeditor@4.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2mmd-x6ge-fuaw"},{"vulnerability":"VCID-2nbt-ysxu-d3bu"},{"vulnerability":"VCID-fm9y-ujc1-qbaq"},{"vulnerability":"VCID-mevr-4wd2-gkch"},{"vulnerability":"VCID-qxab-9uwr-yqhv"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/ckeditor@4.0.0"},{"url":"http://public2.vulnerablecode.io/api/packages/228446?format=json","purl":"pkg:npm/ckeditor@4.5.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2mmd-x6ge-fuaw"},{"vulnerability":"VCID-2nbt-ysxu-d3bu"},{"vulnerability":"VCID-fm9y-ujc1-qbaq"},{"vulnerability":"VCID-jwb5-yddw-7yc7"},{"vulnerability":"VCID-mevr-4wd2-gkch"},{"vulnerability":"VCID-qxab-9uwr-yqhv"},{"vulnerability":"VCID-x4h6-xdj1-ebeu"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/ckeditor@4.5.6"},{"url":"http://public2.vulnerablecode.io/api/packages/228447?format=json","purl":"pkg:npm/ckeditor@4.5.7","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2mmd-x6ge-fuaw"},{"vulnerability":"VCID-2nbt-ysxu-d3bu"},{"vulnerability":"VCID-fm9y-ujc1-qbaq"},{"vulnerability":"VCID-jwb5-yddw-7yc7"},{"vulnerability":"VCID-mevr-4wd2-gkch"},{"vulnerability":"VCID-qxab-9uwr-yqhv"},{"vulnerability":"VCID-x4h6-xdj1-ebeu"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/ckeditor@4.5.7"},{"url":"http://public2.vulnerablecode.io/api/packages/228448?format=json","purl":"pkg:npm/ckeditor@4.5.8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2mmd-x6ge-fuaw"},{"vulnerability":"VCID-2nbt-ysxu-d3bu"},{"vulnerability":"VCID-fm9y-ujc1-qbaq"},{"vulnerability":"VCID-jwb5-yddw-7yc7"},{"vulnerability":"VCID-mevr-4wd2-gkch"},{"vulnerability":"VCID-qxab-9uwr-yqhv"},{"vulnerability":"VCID-x4h6-xdj1-ebeu"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/ckeditor@4.5.8"},{"url":"http://public2.vulnerablecode.io/api/packages/228449?format=json","purl":"pkg:npm/ckeditor@4.5.9","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2mmd-x6ge-fuaw"},{"vulnerability":"VCID-2nbt-ysxu-d3bu"},{"vulnerability":"VCID-fm9y-ujc1-qbaq"},{"vulnerability":"VCID-jwb5-yddw-7yc7"},{"vulnerability":"VCID-mevr-4wd2-gkch"},{"vulnerability":"VCID-qxab-9uwr-yqhv"},{"vulnerability":"VCID-x4h6-xdj1-ebeu"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/ckeditor@4.5.9"},{"url":"http://public2.vulnerablecode.io/api/packages/228450?format=json","purl":"pkg:npm/ckeditor@4.5.10","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2mmd-x6ge-fuaw"},{"vulnerability":"VCID-2nbt-ysxu-d3bu"},{"vulnerability":"VCID-fm9y-ujc1-qbaq"},{"vulnerability":"VCID-jwb5-yddw-7yc7"},{"vulnerability":"VCID-mevr-4wd2-gkch"},{"vulnerability":"VCID-qxab-9uwr-yqhv"},{"vulnerability":"VCID-x4h6-xdj1-ebeu"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/ckeditor@4.5.10"},{"url":"http://public2.vulnerablecode.io/api/packages/228451?format=json","purl":"pkg:npm/ckeditor@4.5.11","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2mmd-x6ge-fuaw"},{"vulnerability":"VCID-2nbt-ysxu-d3bu"},{"vulnerability":"VCID-fm9y-ujc1-qbaq"},{"vulnerability":"VCID-jwb5-yddw-7yc7"},{"vulnerability":"VCID-mevr-4wd2-gkch"},{"vulnerability":"VCID-qxab-9uwr-yqhv"},{"vulnerability":"VCID-x4h6-xdj1-ebeu"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/ckeditor@4.5.11"},{"url":"http://public2.vulnerablecode.io/api/packages/228452?format=json","purl":"pkg:npm/ckeditor@4.6.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2mmd-x6ge-fuaw"},{"vulnerability":"VCID-2nbt-ysxu-d3bu"},{"vulnerability":"VCID-fm9y-ujc1-qbaq"},{"vulnerability":"VCID-jwb5-yddw-7yc7"},{"vulnerability":"VCID-mevr-4wd2-gkch"},{"vulnerability":"VCID-qxab-9uwr-yqhv"},{"vulnerability":"VCID-x4h6-xdj1-ebeu"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/ckeditor@4.6.0"},{"url":"http://public2.vulnerablecode.io/api/packages/228453?format=json","purl":"pkg:npm/ckeditor@4.6.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2mmd-x6ge-fuaw"},{"vulnerability":"VCID-2nbt-ysxu-d3bu"},{"vulnerability":"VCID-fm9y-ujc1-qbaq"},{"vulnerability":"VCID-jwb5-yddw-7yc7"},{"vulnerability":"VCID-mevr-4wd2-gkch"},{"vulnerability":"VCID-qxab-9uwr-yqhv"},{"vulnerability":"VCID-x4h6-xdj1-ebeu"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/ckeditor@4.6.1"},{"url":"http://public2.vulnerablecode.io/api/packages/228454?format=json","purl":"pkg:npm/ckeditor@4.6.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2mmd-x6ge-fuaw"},{"vulnerability":"VCID-2nbt-ysxu-d3bu"},{"vulnerability":"VCID-fm9y-ujc1-qbaq"},{"vulnerability":"VCID-jwb5-yddw-7yc7"},{"vulnerability":"VCID-mevr-4wd2-gkch"},{"vulnerability":"VCID-qxab-9uwr-yqhv"},{"vulnerability":"VCID-x4h6-xdj1-ebeu"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/ckeditor@4.6.2"},{"url":"http://public2.vulnerablecode.io/api/packages/228455?format=json","purl":"pkg:npm/ckeditor@4.7.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2mmd-x6ge-fuaw"},{"vulnerability":"VCID-2nbt-ysxu-d3bu"},{"vulnerability":"VCID-fm9y-ujc1-qbaq"},{"vulnerability":"VCID-jwb5-yddw-7yc7"},{"vulnerability":"VCID-mevr-4wd2-gkch"},{"vulnerability":"VCID-qxab-9uwr-yqhv"},{"vulnerability":"VCID-x4h6-xdj1-ebeu"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/ckeditor@4.7.0"},{"url":"http://public2.vulnerablecode.io/api/packages/228456?format=json","purl":"pkg:npm/ckeditor@4.7.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2mmd-x6ge-fuaw"},{"vulnerability":"VCID-2nbt-ysxu-d3bu"},{"vulnerability":"VCID-fm9y-ujc1-qbaq"},{"vulnerability":"VCID-jwb5-yddw-7yc7"},{"vulnerability":"VCID-mevr-4wd2-gkch"},{"vulnerability":"VCID-qxab-9uwr-yqhv"},{"vulnerability":"VCID-x4h6-xdj1-ebeu"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/ckeditor@4.7.1"},{"url":"http://public2.vulnerablecode.io/api/packages/228457?format=json","purl":"pkg:npm/ckeditor@4.7.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2mmd-x6ge-fuaw"},{"vulnerability":"VCID-2nbt-ysxu-d3bu"},{"vulnerability":"VCID-fm9y-ujc1-qbaq"},{"vulnerability":"VCID-jwb5-yddw-7yc7"},{"vulnerability":"VCID-mevr-4wd2-gkch"},{"vulnerability":"VCID-qxab-9uwr-yqhv"},{"vulnerability":"VCID-x4h6-xdj1-ebeu"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/ckeditor@4.7.2"},{"url":"http://public2.vulnerablecode.io/api/packages/228458?format=json","purl":"pkg:npm/ckeditor@4.7.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2mmd-x6ge-fuaw"},{"vulnerability":"VCID-2nbt-ysxu-d3bu"},{"vulnerability":"VCID-fm9y-ujc1-qbaq"},{"vulnerability":"VCID-jwb5-yddw-7yc7"},{"vulnerability":"VCID-mevr-4wd2-gkch"},{"vulnerability":"VCID-qxab-9uwr-yqhv"},{"vulnerability":"VCID-x4h6-xdj1-ebeu"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/ckeditor@4.7.3"},{"url":"http://public2.vulnerablecode.io/api/packages/228459?format=json","purl":"pkg:npm/ckeditor@4.8.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2mmd-x6ge-fuaw"},{"vulnerability":"VCID-2nbt-ysxu-d3bu"},{"vulnerability":"VCID-fm9y-ujc1-qbaq"},{"vulnerability":"VCID-jwb5-yddw-7yc7"},{"vulnerability":"VCID-mevr-4wd2-gkch"},{"vulnerability":"VCID-qxab-9uwr-yqhv"},{"vulnerability":"VCID-x4h6-xdj1-ebeu"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/ckeditor@4.8.0"},{"url":"http://public2.vulnerablecode.io/api/packages/228460?format=json","purl":"pkg:npm/ckeditor@4.9.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2mmd-x6ge-fuaw"},{"vulnerability":"VCID-2nbt-ysxu-d3bu"},{"vulnerability":"VCID-fm9y-ujc1-qbaq"},{"vulnerability":"VCID-jwb5-yddw-7yc7"},{"vulnerability":"VCID-mevr-4wd2-gkch"},{"vulnerability":"VCID-qxab-9uwr-yqhv"},{"vulnerability":"VCID-x4h6-xdj1-ebeu"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/ckeditor@4.9.0"},{"url":"http://public2.vulnerablecode.io/api/packages/228461?format=json","purl":"pkg:npm/ckeditor@4.9.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2mmd-x6ge-fuaw"},{"vulnerability":"VCID-2nbt-ysxu-d3bu"},{"vulnerability":"VCID-fm9y-ujc1-qbaq"},{"vulnerability":"VCID-jwb5-yddw-7yc7"},{"vulnerability":"VCID-mevr-4wd2-gkch"},{"vulnerability":"VCID-qxab-9uwr-yqhv"},{"vulnerability":"VCID-x4h6-xdj1-ebeu"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/ckeditor@4.9.1"},{"url":"http://public2.vulnerablecode.io/api/packages/228462?format=json","purl":"pkg:npm/ckeditor@4.9.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2mmd-x6ge-fuaw"},{"vulnerability":"VCID-2nbt-ysxu-d3bu"},{"vulnerability":"VCID-fm9y-ujc1-qbaq"},{"vulnerability":"VCID-jwb5-yddw-7yc7"},{"vulnerability":"VCID-mevr-4wd2-gkch"},{"vulnerability":"VCID-qxab-9uwr-yqhv"},{"vulnerability":"VCID-x4h6-xdj1-ebeu"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/ckeditor@4.9.2"},{"url":"http://public2.vulnerablecode.io/api/packages/228463?format=json","purl":"pkg:npm/ckeditor@4.10.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2mmd-x6ge-fuaw"},{"vulnerability":"VCID-2nbt-ysxu-d3bu"},{"vulnerability":"VCID-fm9y-ujc1-qbaq"},{"vulnerability":"VCID-jwb5-yddw-7yc7"},{"vulnerability":"VCID-mevr-4wd2-gkch"},{"vulnerability":"VCID-qxab-9uwr-yqhv"},{"vulnerability":"VCID-x4h6-xdj1-ebeu"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/ckeditor@4.10.0"},{"url":"http://public2.vulnerablecode.io/api/packages/228464?format=json","purl":"pkg:npm/ckeditor@4.10.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2mmd-x6ge-fuaw"},{"vulnerability":"VCID-2nbt-ysxu-d3bu"},{"vulnerability":"VCID-fm9y-ujc1-qbaq"},{"vulnerability":"VCID-jwb5-yddw-7yc7"},{"vulnerability":"VCID-mevr-4wd2-gkch"},{"vulnerability":"VCID-qxab-9uwr-yqhv"},{"vulnerability":"VCID-x4h6-xdj1-ebeu"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/ckeditor@4.10.1"},{"url":"http://public2.vulnerablecode.io/api/packages/57026?format=json","purl":"pkg:npm/ckeditor@4.11.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2mmd-x6ge-fuaw"},{"vulnerability":"VCID-2nbt-ysxu-d3bu"},{"vulnerability":"VCID-fm9y-ujc1-qbaq"},{"vulnerability":"VCID-jwb5-yddw-7yc7"},{"vulnerability":"VCID-mevr-4wd2-gkch"},{"vulnerability":"VCID-x4h6-xdj1-ebeu"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/ckeditor@4.11.0"},{"url":"http://public2.vulnerablecode.io/api/packages/286327?format=json","purl":"pkg:npm/ckeditor@4.11.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2mmd-x6ge-fuaw"},{"vulnerability":"VCID-2nbt-ysxu-d3bu"},{"vulnerability":"VCID-fm9y-ujc1-qbaq"},{"vulnerability":"VCID-jwb5-yddw-7yc7"},{"vulnerability":"VCID-mevr-4wd2-gkch"},{"vulnerability":"VCID-x4h6-xdj1-ebeu"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/ckeditor@4.11.1"},{"url":"http://public2.vulnerablecode.io/api/packages/286328?format=json","purl":"pkg:npm/ckeditor@4.11.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2mmd-x6ge-fuaw"},{"vulnerability":"VCID-2nbt-ysxu-d3bu"},{"vulnerability":"VCID-fm9y-ujc1-qbaq"},{"vulnerability":"VCID-jwb5-yddw-7yc7"},{"vulnerability":"VCID-mevr-4wd2-gkch"},{"vulnerability":"VCID-x4h6-xdj1-ebeu"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/ckeditor@4.11.2"},{"url":"http://public2.vulnerablecode.io/api/packages/286329?format=json","purl":"pkg:npm/ckeditor@4.11.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2mmd-x6ge-fuaw"},{"vulnerability":"VCID-2nbt-ysxu-d3bu"},{"vulnerability":"VCID-fm9y-ujc1-qbaq"},{"vulnerability":"VCID-jwb5-yddw-7yc7"},{"vulnerability":"VCID-mevr-4wd2-gkch"},{"vulnerability":"VCID-x4h6-xdj1-ebeu"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/ckeditor@4.11.3"},{"url":"http://public2.vulnerablecode.io/api/packages/286330?format=json","purl":"pkg:npm/ckeditor@4.11.4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2mmd-x6ge-fuaw"},{"vulnerability":"VCID-2nbt-ysxu-d3bu"},{"vulnerability":"VCID-fm9y-ujc1-qbaq"},{"vulnerability":"VCID-jwb5-yddw-7yc7"},{"vulnerability":"VCID-mevr-4wd2-gkch"},{"vulnerability":"VCID-x4h6-xdj1-ebeu"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/ckeditor@4.11.4"},{"url":"http://public2.vulnerablecode.io/api/packages/286331?format=json","purl":"pkg:npm/ckeditor@4.12.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2mmd-x6ge-fuaw"},{"vulnerability":"VCID-2nbt-ysxu-d3bu"},{"vulnerability":"VCID-fm9y-ujc1-qbaq"},{"vulnerability":"VCID-jwb5-yddw-7yc7"},{"vulnerability":"VCID-mevr-4wd2-gkch"},{"vulnerability":"VCID-x4h6-xdj1-ebeu"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/ckeditor@4.12.0"},{"url":"http://public2.vulnerablecode.io/api/packages/286332?format=json","purl":"pkg:npm/ckeditor@4.12.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2mmd-x6ge-fuaw"},{"vulnerability":"VCID-2nbt-ysxu-d3bu"},{"vulnerability":"VCID-fm9y-ujc1-qbaq"},{"vulnerability":"VCID-jwb5-yddw-7yc7"},{"vulnerability":"VCID-mevr-4wd2-gkch"},{"vulnerability":"VCID-x4h6-xdj1-ebeu"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/ckeditor@4.12.1"},{"url":"http://public2.vulnerablecode.io/api/packages/57029?format=json","purl":"pkg:npm/ckeditor4@4.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2mmd-x6ge-fuaw"},{"vulnerability":"VCID-2nbt-ysxu-d3bu"},{"vulnerability":"VCID-cbgv-19kg-z7a9"},{"vulnerability":"VCID-fm9y-ujc1-qbaq"},{"vulnerability":"VCID-fp57-g65s-2qdx"},{"vulnerability":"VCID-mevr-4wd2-gkch"},{"vulnerability":"VCID-qxab-9uwr-yqhv"},{"vulnerability":"VCID-tp81-dw6e-9qah"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/ckeditor4@4.0.0"},{"url":"http://public2.vulnerablecode.io/api/packages/57030?format=json","purl":"pkg:npm/ckeditor4@4.13.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2mmd-x6ge-fuaw"},{"vulnerability":"VCID-2nbt-ysxu-d3bu"},{"vulnerability":"VCID-2x4x-gkb7-u3b8"},{"vulnerability":"VCID-3ze6-frgs-bqc6"},{"vulnerability":"VCID-6xfu-dm97-nkg4"},{"vulnerability":"VCID-cbgv-19kg-z7a9"},{"vulnerability":"VCID-dhra-m93g-tucw"},{"vulnerability":"VCID-e4fg-q8d2-pkan"},{"vulnerability":"VCID-fm9y-ujc1-qbaq"},{"vulnerability":"VCID-jwb5-yddw-7yc7"},{"vulnerability":"VCID-mevr-4wd2-gkch"},{"vulnerability":"VCID-tp81-dw6e-9qah"},{"vulnerability":"VCID-w6rn-hsx2-q3hc"},{"vulnerability":"VCID-x4h6-xdj1-ebeu"},{"vulnerability":"VCID-zpr3-15yc-gfcn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/ckeditor4@4.13.0"},{"url":"http://public2.vulnerablecode.io/api/packages/249843?format=json","purl":"pkg:npm/ckeditor4@4.13.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2mmd-x6ge-fuaw"},{"vulnerability":"VCID-2nbt-ysxu-d3bu"},{"vulnerability":"VCID-2x4x-gkb7-u3b8"},{"vulnerability":"VCID-3ze6-frgs-bqc6"},{"vulnerability":"VCID-6xfu-dm97-nkg4"},{"vulnerability":"VCID-cbgv-19kg-z7a9"},{"vulnerability":"VCID-dhra-m93g-tucw"},{"vulnerability":"VCID-e4fg-q8d2-pkan"},{"vulnerability":"VCID-fm9y-ujc1-qbaq"},{"vulnerability":"VCID-jwb5-yddw-7yc7"},{"vulnerability":"VCID-mevr-4wd2-gkch"},{"vulnerability":"VCID-tp81-dw6e-9qah"},{"vulnerability":"VCID-w6rn-hsx2-q3hc"},{"vulnerability":"VCID-x4h6-xdj1-ebeu"},{"vulnerability":"VCID-zpr3-15yc-gfcn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/ckeditor4@4.13.1"},{"url":"http://public2.vulnerablecode.io/api/packages/76835?format=json","purl":"pkg:npm/ckeditor4@4.14.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2mmd-x6ge-fuaw"},{"vulnerability":"VCID-2nbt-ysxu-d3bu"},{"vulnerability":"VCID-2x4x-gkb7-u3b8"},{"vulnerability":"VCID-3ze6-frgs-bqc6"},{"vulnerability":"VCID-6xfu-dm97-nkg4"},{"vulnerability":"VCID-8rwx-uyv9-e3ee"},{"vulnerability":"VCID-cbgv-19kg-z7a9"},{"vulnerability":"VCID-dhra-m93g-tucw"},{"vulnerability":"VCID-e4fg-q8d2-pkan"},{"vulnerability":"VCID-fm9y-ujc1-qbaq"},{"vulnerability":"VCID-jwb5-yddw-7yc7"},{"vulnerability":"VCID-mevr-4wd2-gkch"},{"vulnerability":"VCID-w6rn-hsx2-q3hc"},{"vulnerability":"VCID-x4h6-xdj1-ebeu"},{"vulnerability":"VCID-zpr3-15yc-gfcn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/ckeditor4@4.14.0"},{"url":"http://public2.vulnerablecode.io/api/packages/286326?format=json","purl":"pkg:npm/ckeditor4@4.14.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2mmd-x6ge-fuaw"},{"vulnerability":"VCID-2nbt-ysxu-d3bu"},{"vulnerability":"VCID-2x4x-gkb7-u3b8"},{"vulnerability":"VCID-3ze6-frgs-bqc6"},{"vulnerability":"VCID-6xfu-dm97-nkg4"},{"vulnerability":"VCID-8rwx-uyv9-e3ee"},{"vulnerability":"VCID-cbgv-19kg-z7a9"},{"vulnerability":"VCID-dhra-m93g-tucw"},{"vulnerability":"VCID-e4fg-q8d2-pkan"},{"vulnerability":"VCID-fm9y-ujc1-qbaq"},{"vulnerability":"VCID-jwb5-yddw-7yc7"},{"vulnerability":"VCID-mevr-4wd2-gkch"},{"vulnerability":"VCID-w6rn-hsx2-q3hc"},{"vulnerability":"VCID-x4h6-xdj1-ebeu"},{"vulnerability":"VCID-zpr3-15yc-gfcn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/ckeditor4@4.14.1"},{"url":"http://public2.vulnerablecode.io/api/packages/79103?format=json","purl":"pkg:npm/ckeditor4@4.15.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2mmd-x6ge-fuaw"},{"vulnerability":"VCID-2nbt-ysxu-d3bu"},{"vulnerability":"VCID-2x4x-gkb7-u3b8"},{"vulnerability":"VCID-3ze6-frgs-bqc6"},{"vulnerability":"VCID-6xfu-dm97-nkg4"},{"vulnerability":"VCID-8rwx-uyv9-e3ee"},{"vulnerability":"VCID-cbgv-19kg-z7a9"},{"vulnerability":"VCID-dhra-m93g-tucw"},{"vulnerability":"VCID-e4fg-q8d2-pkan"},{"vulnerability":"VCID-fm9y-ujc1-qbaq"},{"vulnerability":"VCID-jwb5-yddw-7yc7"},{"vulnerability":"VCID-mevr-4wd2-gkch"},{"vulnerability":"VCID-qv6k-z4g2-hucv"},{"vulnerability":"VCID-w6rn-hsx2-q3hc"},{"vulnerability":"VCID-x4h6-xdj1-ebeu"},{"vulnerability":"VCID-zpr3-15yc-gfcn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/ckeditor4@4.15.0"},{"url":"http://public2.vulnerablecode.io/api/packages/67780?format=json","purl":"pkg:npm/ckeditor4@4.15.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2mmd-x6ge-fuaw"},{"vulnerability":"VCID-2nbt-ysxu-d3bu"},{"vulnerability":"VCID-2x4x-gkb7-u3b8"},{"vulnerability":"VCID-3ze6-frgs-bqc6"},{"vulnerability":"VCID-6xfu-dm97-nkg4"},{"vulnerability":"VCID-8rwx-uyv9-e3ee"},{"vulnerability":"VCID-cbgv-19kg-z7a9"},{"vulnerability":"VCID-dhra-m93g-tucw"},{"vulnerability":"VCID-e4fg-q8d2-pkan"},{"vulnerability":"VCID-fm9y-ujc1-qbaq"},{"vulnerability":"VCID-jwb5-yddw-7yc7"},{"vulnerability":"VCID-mevr-4wd2-gkch"},{"vulnerability":"VCID-w6rn-hsx2-q3hc"},{"vulnerability":"VCID-x4h6-xdj1-ebeu"},{"vulnerability":"VCID-zpr3-15yc-gfcn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/ckeditor4@4.15.1"},{"url":"http://public2.vulnerablecode.io/api/packages/79592?format=json","purl":"pkg:npm/ckeditor4@4.16.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2mmd-x6ge-fuaw"},{"vulnerability":"VCID-2nbt-ysxu-d3bu"},{"vulnerability":"VCID-2x4x-gkb7-u3b8"},{"vulnerability":"VCID-3ze6-frgs-bqc6"},{"vulnerability":"VCID-6xfu-dm97-nkg4"},{"vulnerability":"VCID-8rwx-uyv9-e3ee"},{"vulnerability":"VCID-cbgv-19kg-z7a9"},{"vulnerability":"VCID-dhra-m93g-tucw"},{"vulnerability":"VCID-e4fg-q8d2-pkan"},{"vulnerability":"VCID-fm9y-ujc1-qbaq"},{"vulnerability":"VCID-jwb5-yddw-7yc7"},{"vulnerability":"VCID-x4h6-xdj1-ebeu"},{"vulnerability":"VCID-zpr3-15yc-gfcn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/ckeditor4@4.16.0"},{"url":"http://public2.vulnerablecode.io/api/packages/80980?format=json","purl":"pkg:npm/ckeditor4@4.16.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2mmd-x6ge-fuaw"},{"vulnerability":"VCID-2nbt-ysxu-d3bu"},{"vulnerability":"VCID-2x4x-gkb7-u3b8"},{"vulnerability":"VCID-3ze6-frgs-bqc6"},{"vulnerability":"VCID-6xfu-dm97-nkg4"},{"vulnerability":"VCID-cbgv-19kg-z7a9"},{"vulnerability":"VCID-dhra-m93g-tucw"},{"vulnerability":"VCID-e4fg-q8d2-pkan"},{"vulnerability":"VCID-fm9y-ujc1-qbaq"},{"vulnerability":"VCID-jwb5-yddw-7yc7"},{"vulnerability":"VCID-x4h6-xdj1-ebeu"},{"vulnerability":"VCID-zpr3-15yc-gfcn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/ckeditor4@4.16.1"},{"url":"http://public2.vulnerablecode.io/api/packages/58681?format=json","purl":"pkg:npm/ckeditor4@4.16.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2mmd-x6ge-fuaw"},{"vulnerability":"VCID-2nbt-ysxu-d3bu"},{"vulnerability":"VCID-2x4x-gkb7-u3b8"},{"vulnerability":"VCID-3ze6-frgs-bqc6"},{"vulnerability":"VCID-6xfu-dm97-nkg4"},{"vulnerability":"VCID-cbgv-19kg-z7a9"},{"vulnerability":"VCID-dhra-m93g-tucw"},{"vulnerability":"VCID-fm9y-ujc1-qbaq"},{"vulnerability":"VCID-zpr3-15yc-gfcn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/ckeditor4@4.16.2"},{"url":"http://public2.vulnerablecode.io/api/packages/59572?format=json","purl":"pkg:npm/ckeditor4@4.17.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2mmd-x6ge-fuaw"},{"vulnerability":"VCID-2nbt-ysxu-d3bu"},{"vulnerability":"VCID-2x4x-gkb7-u3b8"},{"vulnerability":"VCID-3ze6-frgs-bqc6"},{"vulnerability":"VCID-dhra-m93g-tucw"},{"vulnerability":"VCID-fm9y-ujc1-qbaq"},{"vulnerability":"VCID-zpr3-15yc-gfcn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/ckeditor4@4.17.0"},{"url":"http://public2.vulnerablecode.io/api/packages/563108?format=json","purl":"pkg:npm/ckeditor4@4.17.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2mmd-x6ge-fuaw"},{"vulnerability":"VCID-2nbt-ysxu-d3bu"},{"vulnerability":"VCID-2x4x-gkb7-u3b8"},{"vulnerability":"VCID-3ze6-frgs-bqc6"},{"vulnerability":"VCID-dhra-m93g-tucw"},{"vulnerability":"VCID-fm9y-ujc1-qbaq"},{"vulnerability":"VCID-zpr3-15yc-gfcn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/ckeditor4@4.17.1"},{"url":"http://public2.vulnerablecode.io/api/packages/563109?format=json","purl":"pkg:npm/ckeditor4@4.17.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2mmd-x6ge-fuaw"},{"vulnerability":"VCID-2nbt-ysxu-d3bu"},{"vulnerability":"VCID-2x4x-gkb7-u3b8"},{"vulnerability":"VCID-3ze6-frgs-bqc6"},{"vulnerability":"VCID-dhra-m93g-tucw"},{"vulnerability":"VCID-fm9y-ujc1-qbaq"},{"vulnerability":"VCID-zpr3-15yc-gfcn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/ckeditor4@4.17.2"},{"url":"http://public2.vulnerablecode.io/api/packages/61002?format=json","purl":"pkg:npm/ckeditor4@4.18.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2mmd-x6ge-fuaw"},{"vulnerability":"VCID-2x4x-gkb7-u3b8"},{"vulnerability":"VCID-3ze6-frgs-bqc6"},{"vulnerability":"VCID-dhra-m93g-tucw"},{"vulnerability":"VCID-zpr3-15yc-gfcn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/ckeditor4@4.18.0"},{"url":"http://public2.vulnerablecode.io/api/packages/643579?format=json","purl":"pkg:npm/ckeditor4@4.19.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2mmd-x6ge-fuaw"},{"vulnerability":"VCID-2x4x-gkb7-u3b8"},{"vulnerability":"VCID-3ze6-frgs-bqc6"},{"vulnerability":"VCID-dhra-m93g-tucw"},{"vulnerability":"VCID-zpr3-15yc-gfcn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/ckeditor4@4.19.0"},{"url":"http://public2.vulnerablecode.io/api/packages/643580?format=json","purl":"pkg:npm/ckeditor4@4.19.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2mmd-x6ge-fuaw"},{"vulnerability":"VCID-2x4x-gkb7-u3b8"},{"vulnerability":"VCID-3ze6-frgs-bqc6"},{"vulnerability":"VCID-dhra-m93g-tucw"},{"vulnerability":"VCID-zpr3-15yc-gfcn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/ckeditor4@4.19.1"},{"url":"http://public2.vulnerablecode.io/api/packages/643581?format=json","purl":"pkg:npm/ckeditor4@4.20.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2mmd-x6ge-fuaw"},{"vulnerability":"VCID-2x4x-gkb7-u3b8"},{"vulnerability":"VCID-3ze6-frgs-bqc6"},{"vulnerability":"VCID-dhra-m93g-tucw"},{"vulnerability":"VCID-zpr3-15yc-gfcn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/ckeditor4@4.20.0"},{"url":"http://public2.vulnerablecode.io/api/packages/643582?format=json","purl":"pkg:npm/ckeditor4@4.20.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2mmd-x6ge-fuaw"},{"vulnerability":"VCID-2x4x-gkb7-u3b8"},{"vulnerability":"VCID-3ze6-frgs-bqc6"},{"vulnerability":"VCID-dhra-m93g-tucw"},{"vulnerability":"VCID-zpr3-15yc-gfcn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/ckeditor4@4.20.1"},{"url":"http://public2.vulnerablecode.io/api/packages/643583?format=json","purl":"pkg:npm/ckeditor4@4.20.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2mmd-x6ge-fuaw"},{"vulnerability":"VCID-2x4x-gkb7-u3b8"},{"vulnerability":"VCID-3ze6-frgs-bqc6"},{"vulnerability":"VCID-dhra-m93g-tucw"},{"vulnerability":"VCID-zpr3-15yc-gfcn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:npm/ckeditor4@4.20.2"}],"references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2023-28439","reference_id":"","reference_type":"","scores":[{"value":"0.0054","scoring_system":"epss","scoring_elements":"0.68012","published_at":"2026-06-05T12:55:00Z"},{"value":"0.0054","scoring_system":"epss","scoring_elements":"0.6802","published_at":"2026-06-06T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2023-28439"},{"reference_url":"https://ckeditor.com/cke4/addon/embed","reference_id":"","reference_type":"","scores":[{"value":"4.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-15T17:09:11Z/"}],"url":"https://ckeditor.com/cke4/addon/embed"},{"reference_url":"https://ckeditor.com/cke4/addon/iframe","reference_id":"","reference_type":"","scores":[{"value":"4.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-15T17:09:11Z/"}],"url":"https://ckeditor.com/cke4/addon/iframe"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28439","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28439"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1034481","reference_id":"1034481","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1034481"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1059301","reference_id":"1059301","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1059301"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2023-28439","reference_id":"CVE-2023-28439","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-28439"},{"reference_url":"https://github.com/ckeditor/ckeditor4/security/advisories/GHSA-vh5c-xwqv-cv9g","reference_id":"GHSA-vh5c-xwqv-cv9g","reference_type":"","scores":[{"value":"4.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-15T17:09:11Z/"}],"url":"https://github.com/ckeditor/ckeditor4/security/advisories/GHSA-vh5c-xwqv-cv9g"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GWKG2VCPJNETVCDTXU4X6FQ2PO6XCNGN/","reference_id":"GWKG2VCPJNETVCDTXU4X6FQ2PO6XCNGN","reference_type":"","scores":[{"value":"4.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-15T17:09:11Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GWKG2VCPJNETVCDTXU4X6FQ2PO6XCNGN/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L4ODGOW6PYVOXHQSMWJBOCE6DXWAI33W/","reference_id":"L4ODGOW6PYVOXHQSMWJBOCE6DXWAI33W","reference_type":"","scores":[{"value":"4.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-15T17:09:11Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L4ODGOW6PYVOXHQSMWJBOCE6DXWAI33W/"},{"reference_url":"https://usn.ubuntu.com/7258-1/","reference_id":"USN-7258-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/7258-1/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCYKD3JZWWA3ESOZG4PHJJEXT4EYIUIQ/","reference_id":"VCYKD3JZWWA3ESOZG4PHJJEXT4EYIUIQ","reference_type":"","scores":[{"value":"4.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-15T17:09:11Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCYKD3JZWWA3ESOZG4PHJJEXT4EYIUIQ/"}],"weaknesses":[{"cwe_id":1035,"name":"OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities","description":"Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017."},{"cwe_id":79,"name":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","description":"The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users."},{"cwe_id":937,"name":"OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities","description":"Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013."}],"exploits":[],"severity_range_score":"4.7 - 4.7","exploitability":"0.5","weighted_severity":"4.2","risk_score":2.1,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-2mmd-x6ge-fuaw"}