ckeditor vulnerabilities

CVEs per yearBy the year they were published

1. 20217
2. 20223
3. 20231
4. 20245
5. 20252
6. 20263

Newest CVEs

• CVE-2026-116688

  CKEditor: Cross-site scripting (XSS) in the engine package

  ckeditor · ckeditor5

  High8.1
• CVE-2026-116687

  CKEditor: Cross-site scripting (XSS) in the engine package

  ckeditor · ckeditor5

  Low3.1
• CVE-2026-28343

  CKEditor: Cross-site scripting (XSS) in the HTML Support package

  ckeditor · ckeditor5

  Medium6.4
• CVE-2025-58064

  CKEditor is susceptible to Cross-Site Scripting (XSS) through its clipboard package

  ckeditor · ckeditor5

  Low2.3
• CVE-2025-25299

  Cross-site scripting (XSS) in the real-time collaboration package

  ckeditor · ckeditor5

  Low2.3
• CVE-2024-45613

  CKEditor 5 has Cross-site Scripting vulnerability in the clipboard package

  ckeditor · ckeditor5

  Medium5.1
• CVE-2024-43411

  CKEditor4 has a low risk cross-site scripting (XSS) vulnerability from domain takeover

  ckeditor · ckeditor4

  Low3.1
• CVE-2024-43407

  Code Snippet GeSHi plugin has reflected cross-site scripting (XSS) vulnerability

  ckeditor · ckeditor4

  Medium6.1
• CVE-2024-24816

  Cross-site scripting (XSS) vulnerability in samples with enabled the preview feature

  ckeditor · ckeditor4

  Medium6.1
• CVE-2024-24815

  CKEditor4 Cross-site scripting (XSS) vulnerability caused by incorrect CDATA detection

  ckeditor · ckeditor4

  Medium6.1