Typo3 Cms Rte Ckeditor vulnerabilities

1 vulnerability

Known vulnerabilities in Typo3 Cms Rte Ckeditor, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

RoutineCVE-2023-37905typo3 · cms-rte-ckeditor +3 moreCross-site Scripting (XSS) in Source Mode of Editor in ckeditor-wordcount-pluginckeditor-wordcount-plugin is an open source WordCount Plugin for CKEditor. It has been discovered that the `ckeditor-wordcount-plugin` plugin for CKEditor4 is susceptible to cross-site scripting when switching to the source code mode. This issue has been addressed in version 1.17.12 of the `ckeditor-wordcount-plugin` plugin and users are advised to upgrade. There are no known workarounds for this vulnerability.CVSS6.1MediumEPSS0.57%