CVE-2023-4771

A Cross-Site scripting vulnerability has been found in CKSource CKEditor affecting versions 4.15.1 and earlier. An attacker could send malicious javascript code through the /ckeditor/samples/old/ajax.html file and retrieve an authorized user's information.

CVSS v3.1

6.1 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CVSS v3.1

6.1 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CVSS v3.1

6.1 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.88% chance of exploitation in the next 30 days, 57th percentile

Published

2023-11-16

Updated

2024-10-01

Proof-of-concept exploits (1)

• sahar042/CVE-2023-47714★ · 2024-07-23

References

• CVE Record
• NVD entry

Related

• CVE-2023-40297
• CVE-2024-1207
• CVE-2025-14847
• CVE-2023-47684
• CVE-2023-4776
• CVE-2023-47668