CKEditor was found with cross site scripting vulnerability

CKEditor was found to be prone to cross site scripting vulnerability. It would fail to sanitise user inputs properly. An attacker may make use of this vulnerability to execute arbitrary script code in the browser of a user. They will be doing so in the context of the affected site .This may also allow the attacker to steal cookie based authentication credentials. This can also enable them to also launch other such attacks easily.

Read more

Squid under the threat of Multiple Cross Site Scripting Vulnerabilities

Squid was found to be prone to multiple Cross Site Scripting Vulnerabilities. It was failing to sanitise user supplied input.
An attacker can make use of this vulnerability to execute arbitrary script code in the browser of an unsuspecting user, they do the same in the context of the affected site. This can also allow the attacker to steal cookie based authentication credentials and also launch other similar attacks

Read more