← Back to CVE List

CVE-2020-9440

Published: 2020-03-10T17:15Z
Last Modified: 2024-11-21T05:40Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
A cross-site scripting (XSS) vulnerability in the WSC plugin through 5.5.7.5 for CKEditor 4 allows remote attackers to run arbitrary web script inside an IFRAME element by injecting a crafted HTML element into the editor. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt