Description

Cross-site scripting (XSS) vulnerability in the Preview plugin before 4.4.3 in CKEditor allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Remediation

References

CVE-2014-5191

Related Vulnerabilities

WordPress Plugin WP Featured Post with thumbnail 'src' Parameter Cross-Site Scripting (3.0)

Mailman Other Vulnerability (CVE-2001-0290)

Drupal Core 4.5.x Session Fixation (4.5.0 - 4.5.7)

Drupal Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2025-13080)

WordPress Plugin Photo Gallery by 10Web-Mobile-Friendly Image Gallery Cross-Site Scripting (1.5.22)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2014-5191