CVE-2014-4037
FCKeditor <2.6.11 - XSS
Title source: llmDescription
Cross-site scripting (XSS) vulnerability in editor/dialog/fck_spellerpages/spellerpages/server-scripts/spellchecker.php in FCKeditor before 2.6.11 and earlier allows remote attackers to inject arbitrary web script or HTML via an array key in the textinputs[] parameter, a different issue than CVE-2012-4000.
Scores
EPSS
0.0035
EPSS Percentile
57.4%
Details
CWE
CWE-79
Status
published
Products (2)
ckeditor/fckeditor
< 2.6.10
n/a/n/a
Published
Jun 11, 2014
Tracked Since
Feb 18, 2026