漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Cross-site Scripting in CKEditor4
Vulnerability Description
CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A vulnerability has been discovered in the core HTML processing module and may affect all plugins used by CKEditor 4 prior to version 4.18.0. The vulnerability allows someone to inject malformed HTML bypassing content sanitization, which could result in executing JavaScript code. This problem has been patched in version 4.18.0. There are currently no known workarounds.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Vulnerability Title
CKEditor 跨站脚本漏洞
Vulnerability Description
CKEditor是一套开源的、基于网页的文字编辑器。 CKEditor 4 4.18.0之前版本 存在跨站脚本漏洞，该漏洞源于在核心 HTML 处理模块中发现了一个漏洞，该漏洞影响CKEditor4 4.18.0之前版本使用的所有插件。该漏洞允许攻击者绕过内容清理注入格式错误的 HTML，从而导致执行 JavaScript 代码。
CVSS Information
N/A
Vulnerability Type
N/A