medium6.1
CVE-2020-13669
Cross-site Scripting (XSS) vulnerability in ckeditor of Drupal Core allows attacker to inject XSS.
Impact
Cross-site Scripting (XSS) vulnerability in ckeditor of Drupal Core allows attacker to inject XSS. This issue affects: Drupal Core 8.8.x versions prior to 8.8.10.; 8.9.x versions prior to 8.9.6; 9.0.x versions prior to 9.0.6.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Drupal | Drupal | from 8.8.0 before 8.8.10 from 8.9.0 before 8.9.6 from 9.0.0 before 9.0.6 |