Skip to content
Ckeditor Ckeditor4 vulnerabilities
-
ckeditor ckeditor4
CKEditor4 has a low risk cross-site scripting (XSS) vulnerability from domain takeover
CVE-2024-43411
Fix available
3.1 Low
-
ckeditor, ckeditor ckeditor4 +1 more
Code Snippet GeSHi plugin has reflected cross-site scripting (XSS) vulnerability
CVE-2024-43407
Fix available
6.1 Medium
-
ckeditor, ckeditor ckeditor4 +1 more
Cross-site scripting (XSS) vulnerability in samples with enabled the preview feature
CVE-2024-24816
Public exploitFix available
6.1 Medium
-
ckeditor, ckeditor ckeditor4 +1 more
CKEditor4 Cross-site scripting (XSS) vulnerability caused by incorrect CDATA detection
CVE-2024-24815
Fix available
6.1 Medium
-
ckeditor, ckeditor ckeditor4, fedoraproject fedora +2 more
ckeditor4 plugins vulnerable to cross-site scripting caused by the editor instance destroying process
CVE-2023-28439
4.7 Medium
-
ckeditor, ckeditor ckeditor4, drupal +7 more +9 more
Regular expression Denial of Service in dialog plugin
CVE-2022-24729
Fix available
6.5 Medium
-
ckeditor, ckeditor ckeditor4, drupal +7 more +9 more
Cross-site Scripting in CKEditor4
CVE-2022-24728
Fix available
5.4 Medium
-
ckeditor, ckeditor ckeditor4, drupal +7 more +9 more
HTML comments vulnerability allowing to execute JavaScript code
CVE-2021-41165
Fix available
8.2 High
-
ckeditor, ckeditor ckeditor4, drupal +8 more +10 more
Advanced Content Filter (ACF) vulnerability allowing to execute JavaScript code using malformed HTML
CVE-2021-41164
Fix available
8.2 High
-
ckeditor, ckeditor ckeditor4, debian linux +10 more +12 more
Execution of JavaScript code using malformed HTML in ckeditor
CVE-2021-37695
Fix available
7.3 High
-
ckeditor, ckeditor ckeditor4, fedoraproject fedora +8 more +10 more
Arbitrary HTML injection vulnerability in ckeditor
CVE-2021-32809
Fix available
4.6 Medium
-
ckeditor, ckeditor ckeditor4, fedoraproject fedora +11 more +13 more
Cross-site scripting in ckeditor via abuse of undo functionality
CVE-2021-32808
Fix available
7.6 High