Home

CVE-2018-17960

Description

CKEditor 4.x before 4.11.0 allows user-assisted XSS involving a source-mode paste.

Risk Information

Base Score
6.1
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS Score
Exploitation Probability
2.024

Associated Vulnerability

VulnerabilityOS Platform
Multiple Vulnerabilities are affected in IBM Cognos Analytics 11.2.0Windows
Multiple vulnerabilities are affected in Oracle PeopleSoft Enterprise PeopleTools 8.55Windows
Multiple vulnerabilities are affected in Oracle PeopleSoft Enterprise PeopleTools 8.56Windows
Multiple vulnerabilities are affected in Oracle PeopleSoft Enterprise PeopleTools 8.57Windows
Multiple Vulnerabilities are affected in IBM Sterling B2B Integrator 6.0.3.5Windows
Multiple Vulnerabilities are affected in IBM Sterling B2B Integrator 6.1.1.0Windows
Multiple Vulnerabilities are affected in IBM Cognos Analytics 11.1Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234