Security Ckeditor 4.4.7 Shell Upload / Cross Site Scripting March 12, 2015 007admin Leave a comment Ckeditor version 4.4.7.x suffers from cross site scripting and remote shell upload vulnerabilities.