CVE-2018-17960

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

CKEditor 4.x before 4.11.0 allows user-assisted XSS involving a source-mode paste.

Metrics

CVSS 3.0 6.1/10CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Nov 14, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-179618.6Artifex Ghostscript 9.25 and earlier allows attackers to bypass a sandbox protection mechanism via vectors involving errorhandler setup. NOTCVE-2018-179627.5Qemu has a Buffer Overflow in pcnet_receive in hw/net/pcnet.c because an incorrect integer data type is used.CVE-2018-179639.8qemu_deliver_packet_iov in net/net.c in Qemu accepts packet sizes greater than INT_MAX, which allows attackers to cause a denial of service CVE-2018-179646.1Aryanic HighPortal 12.5 has XSS via an Add Tags action.CVE-2018-179656.5ImageMagick 7.0.7-28 has a memory leak vulnerability in WriteSGIImage in coders/sgi.c.CVE-2018-179666.5ImageMagick 7.0.7-28 has a memory leak vulnerability in WritePDBImage in coders/pdb.c.CVE-2018-179676.5ImageMagick 7.0.7-28 has a memory leak vulnerability in ReadBGRImage in coders/bgr.c.CVE-2018-179687.5A gambling smart contract implementation for RuletkaIo, an Ethereum gambling game, generates a random value that is predictable by an externCVE-2018-179699.8Samsung SCX-6545X V2.00.03.01 03-23-2012 devices allows remote attackers to discover cleartext credentials via iso.3.6.1.4.1.236.11.5.11.81.CVE-2018-17975.5IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 using Enterprise bundle Archives (EBA) could allow a local attacker to traverse direCVE-2018-179725.5An issue was discovered in the proc_pid_stack function in fs/proc/base.c in the Linux kernel through 4.18.11. It does not ensure that only rCVE-2018-179745.5An issue was discovered in Tcpreplay 4.3.0 beta1. A heap-based buffer over-read was triggered in the function dlt_en10mb_encode() of the fil
CVE-2018-17960: Medium severity, CVSS 6.1 | Vulnix