CVE-2020-9440Moyenne · CVSS 6.1EPSS 1,31%Aucun correctif publiéCVE-2020-9440A cross-site scripting (XSS) vulnerability in the WSC plugin through 5.5.7.5 for CKEditor 4 allows remote attackers to run arbitrary web script inside an IFRAME element by injecting a crafted HTML element into the editor.ckeditorSystèmes d’exploitationPublication 10 mars 2020Mise à jour 4 août 2024Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗