XSS Vulnerability in CKEditor 4.x by CKSource
CVE-2018-17960

6.1MEDIUM

Key Information:

Vendor: Ckeditor
Status: Ckeditor
Vendor: CVE Published:; 14 November 2018

What is CVE-2018-17960?

An XSS vulnerability in CKEditor versions before 4.11.0 allows attackers to exploit user-assisted scenarios involving source-mode pasting. This can lead to malicious scripts being executed in the context of the user's session, compromising user data and application integrity. Immediate patching and updates are essential to safeguard applications utilizing this rich text editor.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch