Vulnerability advisory

GHSA-g68x-vvqq-pvw3

Ckeditor XSS Vulnerability

Published Nov 21, 2018Updated Feb 16, 2024OSV record ↗

Also known as CVE-2018-17960

Severity

CVSS 3.xCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected versions

ckeditor npm

All ckeditor advisories →

Affected	Fixed in
All versions before 4.11.0	`4.11.0`Advisories →

typo3/cms-core Packagist

All typo3/cms-core advisories →

Affected	Fixed in
`8.0.0` to before 8.7.21	`8.7.21`Advisories →
Also listed as affected (14) `v8.7.10` `v8.7.11` `v8.7.12` `v8.7.13` `v8.7.14` `v8.7.15` `v8.7.16` `v8.7.17` `v8.7.18` `v8.7.19` `v8.7.20` `v8.7.7` `v8.7.8` `v8.7.9`
`9.0.0` to before 9.5.2	`9.5.2`Advisories →
Also listed as affected (11) `v9.0.0` `v9.1.0` `v9.2.0` `v9.2.1` `v9.3.0` `v9.3.1` `v9.3.2` `v9.3.3` `v9.4.0` `v9.5.0` `v9.5.1`

typo3/cms Packagist

All typo3/cms advisories →

Affected	Fixed in
`8.0.0` to before 8.7.21	`8.7.21`Advisories →
Also listed as affected (36) `8.0.0` `8.0.1` `8.1.0` `8.1.1` `8.1.2` `8.2.0` `8.2.1` `8.3.0` `8.3.1` `8.4.0` `8.4.1` `8.5.0` `8.5.1` `8.6.0` `8.6.1` `8.7.0` `8.7.1` `8.7.2` `v8.7.10` `v8.7.11` `v8.7.12` `v8.7.13` `v8.7.14` `v8.7.15` `v8.7.16` `v8.7.17` `v8.7.18` `v8.7.19` `v8.7.20` `v8.7.3` `v8.7.4` `v8.7.5` `v8.7.6` `v8.7.7` `v8.7.8` `v8.7.9`
`9.0.0` to before 9.5.2	`9.5.2`Advisories →
Also listed as affected (11) `v9.0.0` `v9.1.0` `v9.2.0` `v9.2.1` `v9.3.0` `v9.3.1` `v9.3.2` `v9.3.3` `v9.4.0` `v9.5.0` `v9.5.1`

Description

CKEditor 4.x before 4.11.0 allows user-assisted XSS involving a source-mode paste. It was possible to execute XSS inside the CKEditor source area after persuading the victim to: (i) switch CKEditor to source mode, then (ii) paste a specially crafted HTML code, prepared by the attacker, into the opened CKEditor source area, and (iii) switch back to WYSIWYG mode. Although this is an unlikely scenario, it is recommended to upgrade to the latest editor version.