CVE number = CVE-2021-41165
The vulnerability has been discovered in the core HTML processing module and may affect all plugins used by CKEditor 4.
The problem has been recognized and patched. The fix will be available in version 4.17.0.
Duncan is a technology professional with over 20 years experience of working in various IT roles. He has a interest in cyber security, and has a wide range of other skills in radio, electronics and telecommunications.