Description CKEditor 4.x before 4.11.0 allows user-assisted XSS involving a source-mode paste. Remediation References CVE-2018-17960 Related Vulnerabilities WordPress Plugin Eu Cookie Notice Cross-Site Request Forgery (1.0.6) MySQL CVE-2021-2081 Vulnerability (CVE-2021-2081) PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2016-1283) PostgreSQL Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability (CVE-2024-7348) WordPress Plugin underConstruction Cross-Site Scripting (1.18) Severity Medium Classification CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Tags Missing Update Known Vulnerabilities CWE-707 CVE-2018-17960