Most recent entries from all

fkie_cve-2023-37905

ckeditor-wordcount-plugin is an open source WordCount Plugin for CKEditor. It has been discovered that the `ckeditor-wordcount-plugin` plugin for CKEditor4 is susceptible to cross-site scripting when switching to the source code mode. This issue has been addressed in version 1.17.12 of the `ckeditor-wordcount-plugin` plugin and users are advised to upgrade. There are no known workarounds for this vulnerability.

GHSA-q9w4-w667-qqj4 — ckeditor-wordcount-plugin vulnerable to Cross-site Scripting in Source Mode of Editor

Affected: npm: ckeditor-wordcount-plugin

### Problem

It has been discovered that the `ckeditor-wordcount-plugin` plugin for CKEditor4 is susceptible to cross-site scripting when switching to the source code mode.

### Solution

Update to version 1.17.12 of the `ckeditor-wordcount-plugin` plugin.

### Credits

* @sypets for reporting this finding to the TYPO3 Security Team * @ohader for fixing the issue on behalf of the TYPO3 Security Team

gsd-2023-37905

WID-SEC-W-2023-1878 — TYPO3 Core: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in TYPO3 Core ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen oder Informationen offenzulegen.