ckeditor ckeditor4 vulnerabilities

CVEs per yearBy the year they were published

1. 20215
2. 20222
3. 20231
4. 20244

Newest CVEs

• CVE-2024-43411

  CKEditor4 has a low risk cross-site scripting (XSS) vulnerability from domain takeover

  ckeditor · ckeditor4

  Low3.1
• CVE-2024-43407

  Code Snippet GeSHi plugin has reflected cross-site scripting (XSS) vulnerability

  ckeditor · ckeditor4

  Medium6.1
• CVE-2024-24816

  Cross-site scripting (XSS) vulnerability in samples with enabled the preview feature

  ckeditor · ckeditor4

  Medium6.1
• CVE-2024-24815

  CKEditor4 Cross-site scripting (XSS) vulnerability caused by incorrect CDATA detection

  ckeditor · ckeditor4

  Medium6.1
• CVE-2023-28439

  ckeditor4 plugins vulnerable to cross-site scripting caused by the editor instance destroying process

  ckeditor · ckeditor4

  Medium4.7
• CVE-2022-24729

  Regular expression Denial of Service in dialog plugin

  ckeditor · ckeditor4

  Medium6.5
• CVE-2022-24728

  Cross-site Scripting in CKEditor4

  ckeditor · ckeditor4

  Medium5.4
• CVE-2021-41165

  HTML comments vulnerability allowing to execute JavaScript code

  ckeditor · ckeditor4

  High8.2
• CVE-2021-41164

  Advanced Content Filter (ACF) vulnerability allowing to execute JavaScript code using malformed HTML

  ckeditor · ckeditor4

  High8.2
• CVE-2021-37695

  Execution of JavaScript code using malformed HTML in ckeditor

  ckeditor · ckeditor4

  High7.3