CVE-2020-9440
No fix known EPSS 1%
A cross-site scripting (XSS) vulnerability in the WSC plugin through 5.5.7.5 for CKEditor 4 allows remote attackers to run arbitrary web script inside an IFRAME element by injecting a crafted HTML element into the editor.
Products: ckeditor, webspellchecker, fedoraproject fedora
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu 22.04 LTS | ckeditor | no fix |
| Ubuntu Pro 16.04 LTS | ckeditor | no fix |
| Ubuntu Pro 18.04 LTS | ckeditor | no fix |
| Ubuntu Pro 20.04 LTS | ckeditor | no fix |