diff --git a/advisories/github-reviewed/2023/07/GHSA-q9w4-w667-qqj4/GHSA-q9w4-w667-qqj4.json b/advisories/github-reviewed/2023/07/GHSA-q9w4-w667-qqj4/GHSA-q9w4-w667-qqj4.json index ab60cb62504..414c2c52d8c 100644 --- a/advisories/github-reviewed/2023/07/GHSA-q9w4-w667-qqj4/GHSA-q9w4-w667-qqj4.json +++ b/advisories/github-reviewed/2023/07/GHSA-q9w4-w667-qqj4/GHSA-q9w4-w667-qqj4.json @@ -1,13 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-q9w4-w667-qqj4", - "modified": "2023-07-10T21:54:03Z", + "modified": "2023-07-11T13:48:20Z", "published": "2023-07-10T21:54:03Z", "aliases": [ ], "summary": "ckeditor-wordcount-plugin vulnerable to Cross-site Scripting in Source Mode of Editor", - "details": "### Problem\n\nIt has been discovered that the `ckeditor-wordcount-plugin` plugin for CKEditor4 is susceptible to cross-site scripting when switching to the source code mode.\n\n### Solution\n\nUpdate to version 1.17.11 of the `ckeditor-wordcount-plugin` plugin.\n\n### Credits\n\n* @sypets for reporting this finding to the TYPO3 Security Team\n* @ohader for fixing the issue on behalf of the TYPO3 Security Team\n", + "details": "### Problem\n\nIt has been discovered that the `ckeditor-wordcount-plugin` plugin for CKEditor4 is susceptible to cross-site scripting when switching to the source code mode.\n\n### Solution\n\nUpdate to version 1.17.12 of the `ckeditor-wordcount-plugin` plugin.\n\n### Credits\n\n* @sypets for reporting this finding to the TYPO3 Security Team\n* @ohader for fixing the issue on behalf of the TYPO3 Security Team\n", "severity": [ { "type": "CVSS_V3", @@ -28,13 +28,13 @@ "introduced": "0" }, { - "fixed": "1.17.11" + "fixed": "1.17.12" } ] } ], "database_specific": { - "last_known_affected_version_range": "<= 1.17.10" + "last_known_affected_version_range": "<= 1.17.11" } } ], @@ -47,6 +47,10 @@ "type": "WEB", "url": "https://github.com/w8tcha/CKEditor-WordCount-Plugin/commit/0f03b3e5b7c1409998a13aba3a95396e6fa349d8" }, + { + "type": "WEB", + "url": "https://github.com/w8tcha/CKEditor-WordCount-Plugin/commit/a4b154bdf35b3465320136fcb078f196b437c2f1" + }, { "type": "PACKAGE", "url": "https://github.com/w8tcha/CKEditor-WordCount-Plugin"