Younsoung Kim

يحتوي CKEditor 5، وهو محرر نصوص غني بـ JavaScript، على ثغرة أمنية من نوع البرمجة النصية عبر المواقع (XSS) في وظيفة «الدعم العام لـ HTML». تنشأ هذه الثغرة الأمنية من إدخال علامات مصممة خصيصًا، مما قد يؤدي إلى تنفيذ غير مصرح به لرمز JavaScript. يتم استغلال الثغرة الأمنية عندما يكون المحرر مُهيأً لاستخدام إعداد غير آمن لـ «الدعم العام لـ HTML». تؤثر الثغرة الأمنية على التثبيتات التي يكون فيها «الدعم العام لـ HTML» ممكّنًا ومهيأً للسماح بعلامات غير آمنة.

The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting (XSS). This allows for Stored XSS attacks.

The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting (XSS). This allows for Stored XSS attacks.

The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting (XSS). This allows for Stored XSS in the Webstix Admin Dashboard RSS Feed.

The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting (XSS). This allows for Stored XSS attacks.

The issue is related to an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. This allows Command Injection in Dextaz Ping.

The issue is related to an Unrestricted Upload of File with Dangerous Type, which affects the Z-Downloads component.

The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks.

The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject malicious scripts into a website, potentially affecting users who access the compromised page.

The issue affects the Auto Poster, allowing for the unrestricted upload of files with dangerous types.