Unknown · Ckeditor 4 Lts · CVE-2024-13245
**Name of the Vulnerable Software and Affected Versions**
CKEditor 4 LTS - WYSIWYG HTML editor versions 1.0.0 through 1.0.0
**Description**
The issue is related to improper neutralization of input during web page generation, allowing Cross-Site Scripting (XSS). This enables attackers to inject malicious scripts into websites, potentially leading to unauthorized access or control.
**Recommendations**
For CKEditor 4 LTS - WYSIWYG HTML editor version 1.0.0, update to version 1.0.1 to resolve the issue.