ckeditor ckeditor5 vulnerabilities

9 published CVEs name ckeditor ckeditor5 among the affected products.

Critical 0High 1Medium 5Low 3Not scored 0

CVEs per yearBy the year they were published

CVE-2026-116688
CKEditor: Cross-site scripting (XSS) in the engine package
ckeditor · ckeditor5
High8.1
CVE-2026-116687
CKEditor: Cross-site scripting (XSS) in the engine package
ckeditor · ckeditor5
Low3.1
CVE-2026-28343
CKEditor: Cross-site scripting (XSS) in the HTML Support package
ckeditor · ckeditor5
Medium6.4
CVE-2025-58064
CKEditor is susceptible to Cross-Site Scripting (XSS) through its clipboard package
ckeditor · ckeditor5
Low2.3
CVE-2025-25299
Cross-site scripting (XSS) in the real-time collaboration package
ckeditor · ckeditor5
Low2.3
CVE-2024-45613
CKEditor 5 has Cross-site Scripting vulnerability in the clipboard package
ckeditor · ckeditor5
Medium5.1
CVE-2022-31175
Cross-site scripting caused by the editor instance destroying process in ckeditor5
ckeditor · ckeditor5
Medium5.8
CVE-2021-21391
Regular expression Denial of Service in multiple packages
ckeditor · ckeditor5
Medium6.5
CVE-2021-21254
Regular expression Denial of Service in Markdown plugin
ckeditor · ckeditor5
Medium6.5