CVE-2009-2324

Published: Jul 5, 2009Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in FCKeditor before 2.6.4.1 allow remote attackers to inject arbitrary web script or HTML via components in the samples (aka _samples) directory.

Affected (27)

Products: Fckeditor: Fckeditor

Fckeditor

1 product

Fckeditor

Configuration A

27 vulnerable

Vulnerable Software	Affected Versions
Fckeditor Fckeditor	Up to 2.6.4
Fckeditor Fckeditor	Version 2.0
Fckeditor Fckeditor	Version 2.0_fc
Fckeditor Fckeditor	Version 2.0_rc2
Fckeditor Fckeditor	Version 2.0rc2
Fckeditor Fckeditor	Version 2.0rc3
Fckeditor Fckeditor	Version 2.1.1
Fckeditor Fckeditor	Version 2.1
Fckeditor Fckeditor	Version 2.2
Fckeditor Fckeditor	Version 2.3.1
Fckeditor Fckeditor	Version 2.3.2
Fckeditor Fckeditor	Version 2.3.3
Fckeditor Fckeditor	Version 2.3
Fckeditor Fckeditor	Version 2.3 beta
Fckeditor Fckeditor	Version 2.4.1
Fckeditor Fckeditor	Version 2.4.2
Fckeditor Fckeditor	Version 2.4.3
Fckeditor Fckeditor	Version 2.4
Fckeditor Fckeditor	Version 2.5.1
Fckeditor Fckeditor	Version 2.5
Fckeditor Fckeditor	Version 2.5 beta
Fckeditor Fckeditor	Version 2.6.1
Fckeditor Fckeditor	Version 2.6.2
Fckeditor Fckeditor	Version 2.6.3
Fckeditor Fckeditor	Version 2.6.3 beta
Fckeditor Fckeditor	Version 2.6.4 beta
Fckeditor Fckeditor	Version 2.6