EDB-51260

PoC

CKEditor 5 35.4.0 - Cross-Site Scripting (XSS)

view exploit source exploit_dbtype webappsauthor Manish Pathakpublished 2023-04-05catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2022-48110USmedium6.1Exploit
CKSource CKEditor 5 35.4.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Full Featured CKEditor5 widget. NOTE: the vendor's position is that this is…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan