1.
CVE-2024-37888 is an XSS in CKEditor 4's Open Link plugin that lets crafted hyperlinks execute JavaScript in a victim's browser. Found during a client engagement, it affects latest plugin versions.
Skip to content
Curated 1 security research writeups, vulnerability advisories and exploitation analyses for CVE-2024-37888.