-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from the AJAX sample's insecure handling of editor content. The original code in samples/old/ajax.html used document.getElementById('editorcontents').innerHTML = editor.getData(), which directly injected raw HTML without sanitization. This allowed execution of arbitrary JavaScript if the content contained malicious scripts. The patch replaced innerHTML with .value on a textarea, which neutralizes the XSS risk. The vulnerable function is saveData(), which implemented the unsafe innerHTML assignment. The core CKEditor functions (e.g., getData()) are not inherently vulnerable, but the sample's misuse of the API introduced the XSS vector.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| ckeditor4 | npm | < 4.24.0-lts | 4.24.0-lts |
JavaScriptJavaScriptOngoing coverage of React2Shell