{"id":"CVE-2023-37905","aliases":["EUVD-2023-2129","GHSA-q9w4-w667-qqj4"],"status":"published","title":"Cross-site Scripting (XSS) in Source Mode of Editor in ckeditor-wordcount-plugin","description":"ckeditor-wordcount-plugin is an open source WordCount Plugin for CKEditor. It has been discovered that the `ckeditor-wordcount-plugin` plugin for CKEditor4 is susceptible to cross-site scripting when switching to the source code mode. This issue has been addressed in version 1.17.12 of the `ckeditor-wordcount-plugin` plugin and users are advised to upgrade. There are no known workarounds for this vulnerability.","severity":{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00568,"percentile":0.47402,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-79"],"published":"2023-07-10T21:54:03Z","modified":"2026-10-28T02:30:33Z","fixes":[{"ecosystem":"npm","package":"ckeditor-wordcount-plugin","fixed_in":["1.17.12"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"npm","package":"ckeditor-wordcount-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.17.11"},{"fixed":"1.17.12"}]}]},{"source":"osv","ecosystem":"npm","package":"ckeditor-wordcount-plugin","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.17.12"}]}]}],"products":[{"vendor":"ckeditor-wordcount-plugin_project","product":"ckeditor-wordcount-plugin"},{"vendor":"typo3","product":"cms-rte-ckeditor"},{"vendor":"w8tcha","product":"ckeditor-wordcount-plugin"}],"references":[{"url":"https://github.com/w8tcha/CKEditor-WordCount-Plugin/security/advisories/GHSA-q9w4-w667-qqj4","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","web"]},{"url":"https://github.com/w8tcha/CKEditor-WordCount-Plugin/commit/0f03b3e5b7c1409998a13aba3a95396e6fa349d8","tags":["x_refsource_MISC","x_transferred","Patch","fix","web"]},{"url":"https://github.com/w8tcha/CKEditor-WordCount-Plugin/commit/a4b154bdf35b3465320136fcb078f196b437c2f1","tags":["x_refsource_MISC","x_transferred","Patch","fix","web"]},{"url":"https://github.com/TYPO3/typo3/security/advisories/GHSA-m8fw-p3cr-6jqc","tags":["x_transferred","advisory","web"]},{"url":"https://typo3.org/security/advisory/typo3-core-sa-2023-004","tags":["x_transferred","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-37905","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-q9w4-w667-qqj4"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/37xxx/CVE-2023-37905.json","tags":["advisory"]},{"url":"https://github.com/w8tcha/CKEditor-WordCount-Plugin","tags":["package"]}],"sources":{"cve":[{"id":"CVE-2023-37905","title":"Cross-site Scripting (XSS) in Source Mode of Editor in ckeditor-wordcount-plugin","description":"ckeditor-wordcount-plugin is an open source WordCount Plugin for CKEditor. It has been discovered that the `ckeditor-wordcount-plugin` plugin for CKEditor4 is susceptible to cross-site scripting when switching to the source code mode. This issue has been addressed in version 1.17.12 of the `ckeditor-wordcount-plugin` plugin and users are advised to upgrade. There are no known workarounds for this vulnerability.\n\n","status":"published","published":"2023-07-21T19:35:49.656Z","modified":"2024-10-21T13:07:15.669Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:35:16.454633Z"}],"euvd":[{"id":"EUVD-2023-2129","description":"ckeditor-wordcount-plugin is an open source WordCount Plugin for CKEditor. It has been discovered that the `ckeditor-wordcount-plugin` plugin for CKEditor4 is susceptible to cross-site scripting when switching to the source code mode. This issue has been addressed in version 1.17.12 of the `ckeditor-wordcount-plugin` plugin and users are advised to upgrade. There are no known workarounds for this vulnerability.\n\n","status":"published","published":"2023-07-21T19:35:49Z","modified":"2024-10-21T13:07:15Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-03T00:27:32.038051Z"}],"ghsa":[{"id":"GHSA-q9w4-w667-qqj4","title":"ckeditor-wordcount-plugin vulnerable to Cross-site Scripting in Source Mode of Editor","description":"### Problem\n\nIt has been discovered that the `ckeditor-wordcount-plugin` plugin for CKEditor4 is susceptible to cross-site scripting when switching to the source code mode.\n\n### Solution\n\nUpdate to version 1.17.12 of the `ckeditor-wordcount-plugin` plugin.\n\n### Credits\n\n* @sypets for reporting this finding to the TYPO3 Security Team\n* @ohader for fixing the issue on behalf of the TYPO3 Security Team\n","status":"published","published":"2023-07-10T21:54:03Z","modified":"2023-11-09T05:01:51Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:37:17.64478Z"}],"nvd":[{"id":"CVE-2023-37905","description":"ckeditor-wordcount-plugin is an open source WordCount Plugin for CKEditor. It has been discovered that the `ckeditor-wordcount-plugin` plugin for CKEditor4 is susceptible to cross-site scripting when switching to the source code mode. This issue has been addressed in version 1.17.12 of the `ckeditor-wordcount-plugin` plugin and users are advised to upgrade. There are no known workarounds for this vulnerability.\n\n","status":"published","published":"2023-07-21T20:15:16.297Z","modified":"2026-06-17T06:08:52.357Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:08:17.044696Z"}],"osv":[{"id":"CVE-2023-37905","title":"Cross-site Scripting (XSS) in Source Mode of Editor in ckeditor-wordcount-plugin","description":"ckeditor-wordcount-plugin is an open source WordCount Plugin for CKEditor. It has been discovered that the `ckeditor-wordcount-plugin` plugin for CKEditor4 is susceptible to cross-site scripting when switching to the source code mode. This issue has been addressed in version 1.17.12 of the `ckeditor-wordcount-plugin` plugin and users are advised to upgrade. There are no known workarounds for this vulnerability.\n\n","status":"published","published":"2023-07-21T19:35:49.656Z","modified":"2026-10-28T02:30:33.417214373Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T15:44:32.922049Z"},{"id":"GHSA-q9w4-w667-qqj4","title":"ckeditor-wordcount-plugin vulnerable to Cross-site Scripting in Source Mode of Editor","description":"### Problem\n\nIt has been discovered that the `ckeditor-wordcount-plugin` plugin for CKEditor4 is susceptible to cross-site scripting when switching to the source code mode.\n\n### Solution\n\nUpdate to version 1.17.12 of the `ckeditor-wordcount-plugin` plugin.\n\n### Credits\n\n* @sypets for reporting this finding to the TYPO3 Security Team\n* @ohader for fixing the issue on behalf of the TYPO3 Security Team\n","status":"published","published":"2023-07-10T21:54:03Z","modified":"2026-02-04T03:37:31.55325Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T15:46:54.40888Z"}]}}