Vigilance.fr - CKEditor4: Cross Site Scripting via WordCount Plugin, analyzed on 25/07/2023
September 2023 by Vigilance.fr
An attacker can trigger a Cross Site Scripting of CKEditor4, via WordCount Plugin, in order to run JavaScript code in the context of the web site.