CKEditor 4.22.1 and Concrete CMS Security Updates

I have seen this happen with 9.3.7 (the client sent me a screen shot) so there appears to be something else going on under the hood.