CVE-2020-13669

score

<0.1

cvss

6.1

epss

0.7%

published

2022-02-11

kev added

—

first seen

2026-10-21

Drupal Core < 8.8.10, < 8.9.6, < 9.0.6 contains a reflected XSS caused by insecure handling in ckeditor, letting attackers inject malicious scripts, exploit requires attacker to lure victim to malicious page.