Ckeditor / Ckeditor4
12 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2024-43411 | CKEditor4 has a low risk cross-site scripting (XSS) vulnerability from domain takeover | MEDIUM | 4.8 | Aug 21, 2024 |
| CVE-2024-43407 | Code Snippet GeSHi plugin has reflected cross-site scripting (XSS) vulnerability | MEDIUM | 5.3 | Aug 21, 2024 |
| CVE-2024-24816 | Cross-site scripting (XSS) vulnerability in samples with enabled the preview feature | MEDIUM | 6.1 | Feb 7, 2024 |
| CVE-2024-24815 | CKEditor4 Cross-site scripting (XSS) vulnerability caused by incorrect CDATA detection | MEDIUM | 6.1 | Feb 7, 2024 |
| CVE-2023-28439 | ckeditor4 plugins vulnerable to cross-site scripting caused by the editor instance destroying process | MEDIUM | 6.1 | Mar 22, 2023 |
| CVE-2022-24729 | Regular expression Denial of Service in dialog plugin | HIGH | 7.5 | Mar 16, 2022 |
| CVE-2022-24728 | Cross-site Scripting in CKEditor4 | MEDIUM | 5.4 | Mar 16, 2022 |
| CVE-2021-41165 | HTML comments vulnerability allowing to execute JavaScript code | HIGH | 8.2 | Nov 17, 2021 |
| CVE-2021-41164 | Advanced Content Filter (ACF) vulnerability allowing to execute JavaScript code using malformed HTML | HIGH | 8.2 | Nov 17, 2021 |
| CVE-2021-37695 | Execution of JavaScript code using malformed HTML in ckeditor | HIGH | 7.3 | Aug 12, 2021 |
| CVE-2021-32809 | Arbitrary HTML injection vulnerability in ckeditor | MEDIUM | 5.4 | Aug 12, 2021 |
| CVE-2021-32808 | Cross-site scripting in ckeditor via abuse of undo functionality | HIGH | 7.6 | Aug 12, 2021 |
Showing 1 to 12 of 12 CVEs