CVE-2024-43411
1 advisory.
npm/ckeditor4 CVE-2024-43411: low 3.1
CKEditor4 low-risk cross-site scripting (XSS) vulnerability linked to potential domain takeover
Action: Upgrade ckeditor4 to 4.25.0 or later.
npm i ckeditor4@4.25.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.22.0 | 4.25.0 | - |
Fixed versions
| 4.25.0 |
Sources
- osv: GHSA-6v96-m24v-f58j
- https://github.com/ckeditor/ckeditor4/security/advisories/GHSA-6v96-m24v-f58j
- https://nvd.nist.gov/vuln/detail/CVE-2024-43411
- https://github.com/ckeditor/ckeditor4/commit/b5069c9cb769ea22eae1cbd7200f22b1cf2e3a7f
- https://github.com/ckeditor/ckeditor4
CVE-2024-43411 · published · modified · JSON