CVE-2019-19502
Code injection in pluginconfig.php in Image Uploader and Browser for CKEditor before 4.1.9 allows remote authenticated users to execute arbitrary PHP code.
CVSS 3.1 · 9.8 Critical
EPSS 1.9%
KEV · Not listed
Vendors
Products