cbcvebase.

Ckeditor Enhanced Image vulnerabilities

1 known vulnerability affecting ckeditor/enhanced_image.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
MEDIUM1

Vulnerabilities

Page 1 of 1
CVE-2018-9861P4MEDIUMCVSS 6.1≥ 4.5.10, < 4.9.22018-04-19
CVE-2018-9861 [MEDIUM] CWE-79 CVE-2018-9861: Cross-site scripting (XSS) vulnerability in the Enhanced Image (aka image2) plugin for CKEditor (in Cross-site scripting (XSS) vulnerability in the Enhanced Image (aka image2) plugin for CKEditor (in versions 4.5.10 through 4.9.1; fixed in 4.9.2), as used in Drupal 8 before 8.4.7 and 8.5.x before 8.5.2 and other products, allows remote attackers to inject arbitrary web script through a crafted IMG element.
nvd
Ckeditor Enhanced Image vulnerabilities | cvebase