CVE-2019-19502

CVE-2019-19502

pluginconfig.php in the Image Uploader and Browser plugin before 4.1.9 for CKEditor mishandles certain characters in pathnames.

Source: CVE-2019-19502