CNNVD-202506-3308 Information
Jun 26, 2025
cve
CNNVD ID
CNNVD-202506-3308
Related CVE
- CNNVD Published: 2025-06-26
Description (Chinese)
Drupal CKEditor5 Youtube是Drupal社区的一个视频集成插件。 Drupal CKEditor5 Youtube 1.0.3之前版本存在安全漏洞，该漏洞源于输入中和不当，可能导致跨站脚本攻击。
Description (English)
Drupal CKEditor5 Youtube is a video integration plugin for the Drupal community. There was a security loophole in the pre-Drupal CKEditor5 Youtube 1.0.3 version, which originated in inappropriate input and could result in a cross-site script attack.
Hazard Level
High
Vulnerability Type
其他
Affected Vendor
Drupal
Published
2025-06-26
Last Modified
2026-02-24
References
https://www.drupal.org/sa-contrib-2025-081
Patch
https://www.drupal.org/sa-contrib-2025-081
Share on: