Security Updates:

• Fixed XSS vulnerability in the Enhanced Image (image2) plugin reported by Kyaw Min Thein.

  Issue summary: It was possible to execute XSS inside CKEditor using the <img> tag and specially crafted HTML. Please note that the default presets (Basic/Standard/Full) do not include this plugin, so you are only at risk if you made a custom build and enabled this plugin.