Description
Cross-site Scripting (XSS) vulnerability in ckeditor of Drupal Core allows attacker to inject XSS. This issue affects: Drupal Core 8.8.x versions prior to 8.8.10.; 8.9.x versions prior to 8.9.6; 9.0.x versions prior to 9.0.6.
Remediation
References
Related Vulnerabilities
WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-60202)
WebLogic CVE-2020-14687 Vulnerability (CVE-2020-14687)
WordPress Plugin StreamCast-Radio Player for WordPress Cross-Site Scripting (2.1)
WordPress Plugin Templatic Tevolution Arbitrary File Upload (2.3.6)
WordPress Plugin Easy Google Map Cross-Site Scripting (1.1.4)