Cross-Site Scripting Vulnerabilities in FCKeditor by Froala
CVE-2009-2324

Currently unrated

Key Information:

Vendor
Fckeditor
Status
Fckeditor
Vendor
CVE Published:
5 July 2009

Summary

FCKeditor prior to version 2.6.4.1 is susceptible to multiple cross-site scripting (XSS) vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web scripts or HTML via components located in the samples directory. This can lead to unauthorized access and manipulation of user data, making it essential for users to update to the latest version to mitigate potential risks.

References

http://www.ocert.org/advisories/ocert-2009-007.html
x_refsource_MISC
http://www.securitytracker.com/id?1022513
vdb-entryx_refsource_SECTRACK
http://www.securityfocus.com/archive/1/504721/100/0/threaded
mailing-listx_refsource_BUGTRAQ

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.