Description
The sample file samples/sample_posteddata.php (distributed with CKEditor 4.0.1) is vulnerable to a Cross-Site Scripting Vulnerability.
Remediation
Upgrade to the latest version of CKEditor or remove the sample_posteddata.php file.
References
Related Vulnerabilities
ownCloud Improper Input Validation Vulnerability (CVE-2014-2585)
WebLogic CVE-2022-21441 Vulnerability (CVE-2022-21441)
Moodle 7PK - Security Features Vulnerability (CVE-2015-5267)
PHP Use After Free Vulnerability (CVE-2019-13224)
Piwigo URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2017-9464)