Ckeditor Enhanced Image vulnerabilities

1 known vulnerability affecting ckeditor/enhanced_image.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2018-9861MEDIUMCVSS 6.1≥ 4.5.10, < 4.9.22018-04-19

CVE-2018-9861 [MEDIUM] CWE-79 CVE-2018-9861: Cross-site scripting (XSS) vulnerability in the Enhanced Image (aka image2) plugin for CKEditor (in Cross-site scripting (XSS) vulnerability in the Enhanced Image (aka image2) plugin for CKEditor (in versions 4.5.10 through 4.9.1; fixed in 4.9.2), as used in Drupal 8 before 8.4.7 and 8.5.x before 8.5.2 and other products, allows remote attackers to inject arbitrary web script through a crafted IMG element.