Skip to content
Ckeditor vulnerabilities
Newest
-
ckeditor ckeditor5
CKEditor: Cross-site scripting (XSS) in the engine package
CVE-2026-116688
Fix available
8.1 High
-
ckeditor ckeditor5
CKEditor: Cross-site scripting (XSS) in the engine package
CVE-2026-116687
Fix available
3.1 Low
-
ckeditor ckeditor5
CKEditor: Cross-site scripting (XSS) in the HTML Support package
CVE-2026-28343
Fix available
6.4 Medium
-
angular, ckeditor ckeditor5 +1 more
A reflected cross-site scripting (XSS) vulnerability in CKeditor v46.1.0 & Angular v18.0.0 allows...
CVE-2025-61261
5.4 Medium
-
ckeditor ckeditor5
CKEditor is susceptible to Cross-Site Scripting (XSS) through its clipboard package
CVE-2025-58064
Fix available
2.3 Low
-
ckeditor ckeditor5
Cross-site scripting (XSS) in the real-time collaboration package
CVE-2025-25299
Fix available
2.3 Low
-
ckeditor ckeditor5
CKEditor 5 has Cross-site Scripting vulnerability in the clipboard package
CVE-2024-45613
Fix available
5.1 Medium
-
ckeditor ckeditor4
CKEditor4 has a low risk cross-site scripting (XSS) vulnerability from domain takeover
CVE-2024-43411
Fix available
3.1 Low
-
ckeditor, ckeditor ckeditor4 +1 more
Code Snippet GeSHi plugin has reflected cross-site scripting (XSS) vulnerability
CVE-2024-43407
Fix available
6.1 Medium
-
ckeditor, ckeditor ckeditor4 +1 more
Cross-site scripting (XSS) vulnerability in samples with enabled the preview feature
CVE-2024-24816
Public exploitFix available
6.1 Medium
-
ckeditor, ckeditor ckeditor4 +1 more
CKEditor4 Cross-site scripting (XSS) vulnerability caused by incorrect CDATA detection
CVE-2024-24815
Fix available
6.1 Medium
-
ckeditor
A unrestricted file upload vulnerability was discovered in the ‘Browse and upload images’ feature...
CVE-2023-31541
Public exploit
9.8 Critical
-
ckeditor, ckeditor ckeditor4, fedoraproject fedora +2 more
ckeditor4 plugins vulnerable to cross-site scripting caused by the editor instance destroying process
CVE-2023-28439
Fix available
4.7 Medium
-
ckeditor
Cross-site scripting in CKEditor5
CVE-2022-48110
Public exploitDisputed
6.1 Medium
-
ckeditor ckeditor5, ckeditor5-html-embed, ckeditor5-html-support +1 more +3 more
Cross-site scripting caused by the editor instance destroying process in ckeditor5
CVE-2022-31175
Fix available
5.8 Medium
-
ckeditor, ckeditor ckeditor4, drupal +7 more +9 more
Regular expression Denial of Service in dialog plugin
CVE-2022-24729
Fix available
6.5 Medium
-
ckeditor, ckeditor ckeditor4, drupal +7 more +9 more
Cross-site Scripting in CKEditor4
CVE-2022-24728
Fix available
5.4 Medium
-
ckeditor, ckeditor ckeditor4, drupal +7 more +9 more
HTML comments vulnerability allowing to execute JavaScript code
CVE-2021-41165
Fix available
8.2 High
-
ckeditor, ckeditor ckeditor4, drupal +8 more +10 more
Advanced Content Filter (ACF) vulnerability allowing to execute JavaScript code using malformed HTML
CVE-2021-41164
Fix available
8.2 High
-
ckeditor, ckeditor ckeditor4, debian linux +10 more +12 more
Execution of JavaScript code using malformed HTML in ckeditor
CVE-2021-37695
Fix available
7.3 High
-
ckeditor, ckeditor ckeditor4, fedoraproject fedora +8 more +10 more
Arbitrary HTML injection vulnerability in ckeditor
CVE-2021-32809
Fix available
4.6 Medium
-
ckeditor, ckeditor ckeditor4, fedoraproject fedora +11 more +13 more
Cross-site scripting in ckeditor via abuse of undo functionality
CVE-2021-32808
Fix available
7.6 High
-
ckeditor, debian linux, drupal +1 more +3 more
ckeditor4 vulnerable to cross-site scripting
CVE-2021-33829
Fix available
6.1 Medium
-
ckeditor ckeditor5, ckeditor5-engine, ckeditor5-font +6 more +8 more
Regular expression Denial of Service in multiple packages
CVE-2021-21391
Fix available
6.5 Medium
-
ckeditor ckeditor5
Regular expression Denial of Service in Markdown plugin
CVE-2021-21254
Fix available
6.5 Medium
-
ckeditor, oracle agile product lifecycle management, application express +7 more +9 more
Inclusion of Functionality from Untrusted Control Sphere in CKEditor 4
CVE-2021-26272
Fix available
6.5 Medium
-
ckeditor, oracle agile product lifecycle management, application express +4 more +6 more
CKEditor 4 ReDoS Vulnerability
CVE-2021-26271
Fix available
6.5 Medium
-
ckeditor, oracle agile product lifecycle management, application express +6 more +8 more
Improper Neutralization of Input During Web Page Generation in CKEditor4
CVE-2020-27193
Fix available
6.1 Medium
-
ckeditor, fedoraproject fedora, webspellchecker +2 more
A cross-site scripting (XSS) vulnerability in the WSC plugin through 5.5.7.5 for CKEditor 4...
CVE-2020-9440
6.1 Medium
-
ckeditor, drupal, fedoraproject fedora +8 more +10 more
CKEditor 4.0 vulnerability in the HTML Data Processor
CVE-2020-9281
Fix available
6.1 Medium
-
ckeditor, cksource ckeditor drupal module +1 more
hook_file_download in the CKEditor module 7.x-1.4 for Drupal does not properly restrict access to...
CVE-2011-4972
7.5 High
-
ckeditor
Ckeditor XSS Vulnerability
CVE-2018-17960
Fix available
6.1 Medium
-
ckeditor 5-link
Cross-Site Scripting in @ckeditor/ckeditor5-link
CVE-2018-11093
Fix available
6.1 Medium
-
ckeditor enhanced image, drupal +1 more
Enhanced Image plugin for CKEditor is vulnerable to Cross-site scripting (XSS)
CVE-2018-9861
Fix available
6.1 Medium
-
ckeditor
The Preview plugin in CKEditor allows Cross-site scripting (XSS)
CVE-2014-5191
Fix available
4.3 Medium
-
ckeditor fckeditor
Cross-site scripting (XSS) vulnerability in editor/dialog/fck_spellerpages/spellerpages/server...
CVE-2014-4037
4.3 Medium
-
ckeditor, ckeditor fckeditor +1 more
Unspecified vulnerability in the CKeditor module 6.x-2.x before 6.x-2.3 and the CKEditor module 6...
CVE-2012-2067
6.8 Medium
-
ckeditor, ckeditor fckeditor +1 more
Cross-site scripting (XSS) vulnerability in the FCKeditor module 6.x-2.x before 6.x-2.3 and the...
CVE-2012-2066
4.3 Medium
-
ckeditor fckeditor
Cross-site scripting (XSS) vulnerability in the print_textinputs_var function in editor/dialog...
CVE-2012-4000
Public exploitFix available
4.3 Medium