VDB

CVE-2020-13669

CVE-2020-13669 PUBLISHED

Cross-site Scripting (XSS) vulnerability in ckeditor of Drupal Core allows attacker to inject XSS. This issue affects: Drupal Core 8.8.x versions prior to 8.8.10.; 8.9.x versions prior to 8.9.6; 9.0.x versions prior to 9.0.6.

EPSS 0.20% · 42.4th percentile

Risk Scores

EPSS Score
0.20%
42.4th percentile

Affected Products

VendorProductVersions
Bitnamidrupal9.0.0, 8.9.0, 8.8.0
Bitnamidrupal8.8.0, 8.9.0, 9.0.0

Exploit Intelligence

Timeline

  • Sep 16, 2020 CVE Published
  • Feb 12, 2022 EPSS Score
  • Apr 5, 2022 EPSS Score
  • May 28, 2022 EPSS Score
  • Jul 20, 2022 EPSS Score
  • Sep 10, 2022 EPSS Score
  • Nov 2, 2022 EPSS Score
  • Dec 24, 2022 EPSS Score
  • Feb 14, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score
  • Apr 7, 2023 EPSS Score
  • May 30, 2023 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›