Security Advisory
CVE-2019-19502
9.8
CRITICAL
Vulnerability Description
Code injection in pluginconfig.php in Image Uploader and Browser for CKEditor before 4.1.9 allows remote authenticated users to execute arbitrary PHP code.
Published Date
December 2, 2019
Official Source
NIST NVD Advisory