Ckeditor Wordcount Plugin Project vulnerabilities

1 vulnerability

Known vulnerabilities in Ckeditor Wordcount Plugin Project products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1 product.

Products

1
RoutineCVE-2023-37905typo3 · cms-rte-ckeditor +3 moreCross-site Scripting (XSS) in Source Mode of Editor in ckeditor-wordcount-pluginckeditor-wordcount-plugin is an open source WordCount Plugin for CKEditor. It has been discovered that the `ckeditor-wordcount-plugin` plugin for CKEditor4 is susceptible to cross-site scripting when switching to the source code mode. This issue has been addressed in version 1.17.12 of the `ckeditor-wordcount-plugin` plugin and users are advised to upgrade. There are no known workarounds for this vulnerability.CVSS6.1MediumEPSS0.57%