Security update SA-CONTRIB-2014-098 - CKEditor - Cross Site Scripting (XSS). See https://www.drupal.org/node/2357029.