CKEditor < 47.6.0 XSS

Language:

Version 1.3 Mar 18, 2026, 10:57 AM CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N") CVSS metrics ("CVSSv3 score" set to 6.1) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:N") CVSS metrics ("CVSSv2 score" set to 6.4) CVSSv3 score source (changed from "CVE-2026-28343" to none) CVSSv2 severity (based on CVE-2026-28343, severity decreased from "High" to "Medium") CVSSv2 score source (set to "CVE-2026-28343") CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:OF/RC:C") Plugin Feed: 202603181057
Version 1.2 Mar 13, 2026, 8:16 PM CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:O/RC:C") Exploit attributes ("Exploitability ease" set to "No known exploits are available") Exploit attributes ("Exploit available" set to "False") Plugin Feed: 202603132016
Version 1.1 Mar 13, 2026, 12:55 AM New Plugin Feed: 202603130055

* Changelogs are generally available for changes made after Nov 1, 2022