system
Describe <CVE-2020-9440>.
user
What is <CVE-2020-9440>?
assistant
A cross-site scripting (XSS) vulnerability in the WSC plugin through 5.5.7.5 for CKEditor 4 allows remote attackers to run arbitrary web script inside an IFRAME element by injecting a crafted HTML element into the editor..