CVE:CVE-2023-37905
CNNVD:CNNVD-202307-1841
CKEditor是一套开源的、基于网页的文字编辑器。
CKEditor-WordCount-Plugin 1.17.12之前版本存在跨站脚本漏洞，该漏洞源于在切换到源代码模式时容易受到跨站脚本攻击。
solution:Upgrade ckeditor-wordcount-plugin_project ckeditor-wordcount-plugin to a higher version than 1.17.12,and avoid the version (,1.17.12)