Approved changes feed: RSS · Atom

cpe:2.3:a:ckeditor:ckeditor:4.0:*:*:*:*:*:*:*

part: a version: 4.0 update: *

VendorCkeditor (877d65b2-0725-531d-9c90-2100c31f9aea)
ProductCkeditor (8e20798a-efec-508d-98f9-71c4cbfdacad)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-9440 vulnerable 2026-06-03 14:43:18.980311 Details available
A cross-site scripting (XSS) vulnerability in the WSC plugin through 5.5.7.5 for CKEditor 4 allows remote attackers to run arbitrary web script inside an IFRAME element by injecting a crafted HTML element into the editor.
Published: 2020-03-10T16:57:12.000Z
Updated: 2024-08-04T10:26:16.100Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.