Skip to content
Cksource vulnerabilities
Newest
-
cksource ckfinder
In CKSource CKFinder before 2.5.0.1 for ASP.NET, authenticated users could download any file from...
CVE-2016-20023
5.0 Medium
-
cksource ckeditor 5 premium features
CKEditor 5 Premium Features - Moderately critical - Access bypass - SA-CONTRIB-2025-118
CVE-2025-13980
Fix available
5.3 Medium
-
cksource ckfinder
CKFinder 1.4.3 is vulnerable to Cross Site Scripting (XSS) in the File Upload function. An...
CVE-2025-63830
Public exploit
6.1 Medium
-
cksource ckeditor 4, drupal ckeditor 4 lts - wysiwyg html editor +1 more
CKEditor 4 LTS - WYSIWYG HTML editor - Moderately critical - Cross Site Scripting - SA-CONTRIB-2024-009
CVE-2024-13245
Fix available
5.4 Medium
-
cksource ckeditor
Cross-Site Scripting vulnerability in CKSource CKEditor
CVE-2023-4771
Fix available
6.1 Medium
-
ckeditor, cksource ckeditor drupal module +1 more
hook_file_download in the CKEditor module 7.x-1.4 for Drupal does not properly restrict access to...
CVE-2011-4972
7.5 High
-
cksource ckfinder
An issue was discovered in CKFinder through 2.6.2.1 and 3.x through 3.5.0. The documentation has...
CVE-2019-15891
5.3 Medium
-
cksource ckfinder
An issue was discovered in CKFinder through 2.6.2.1. Improper checks of file names allows remote...
CVE-2019-15862
7.5 High
-
cksource ckeditor
The ckeditor-for-wordpress plugin before 4.5.3.1 for WordPress has reflected XSS in the "built-in...
CVE-2015-9349
6.1 Medium