Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
FCKeditor spellchecker.php cross site scripting vulnerability - Vulnerability Database

FCKeditor spellchecker.php cross site scripting vulnerability

Description

Cross site scripting (XSS) vulnerability in the print_textinputs_var function in editor/dialog/fck_spellerpages/spellerpages/server-scripts/spellchecker.php in FCKeditor 2.6.7 and earlier allows remote attackers to inject arbitrary web script or HTML via textinputs array parameters.

Remediation

Upgrade to the latest version of FCKeditor.

References

CVE-2012-4000

Related Vulnerabilities

IBM Lotus Domino web server Cross-Site Scripting vulnerabilities High
Common tags: XSS Known Vulnerabilities
ColdFusion XSS (CVE-2023-44352) Medium
Common tags: XSS Known Vulnerabilities
Kayako Fusion v4.51.1891 - multiple web vulnerabilities High
Common tags: XSS Known Vulnerabilities
Keycloak clients-registrations XSS (CVE-2021-20323) Medium
Common tags: XSS Known Vulnerabilities
Cross-site scripting vulnerability in Google Web Toolkit (CVE-2012-5920) High
Common tags: XSS Known Vulnerabilities

Severity

High

Classification

CVE-2012-4000
CWE-79
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Tags

XSS
Known Vulnerabilities