CKEditor was found with cross site scripting vulnerability