application-ckeditor vulnerabilities

1 known vulnerability in application-ckeditor from Xwiki-contrib. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  application-ckeditor: Cross-Site Request Forgery

  CVE-2023-22457Jan 4, 2023Xwiki-contribEPSS 19.3%

  CKEditor Integration UI adds support for editing wiki pages using CKEditor. Prior to versions 1.64.3,t he `CKEditor.HTMLConverter` document lacked a protection against Cross-Site Request Forgery (CSRF), allowing to execute macros with the rights of the current