Vendor

    CKSource

    39 known vulnerabilities in products by CKSource, 0 of them actively exploited (CISA KEV).

    Key figures

    39

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in CKSource
    MediumCVE-2020-9281

    CKEditor: Cross-Site Scripting (XSS)

    also in 9 other products

    		6.1
    CriticalCVE-2023-31541

    CKEditor: Unrestricted File Upload

    		9.8
    MediumCVE-2021-33829

    CKEditor: Cross-Site Scripting (XSS)

    also in 3 other products

    		6.1
    HighCVE-2022-24729

    Regular expression Denial of Service in dialog plugin

    also in 8 other products

    		6.5
    MediumCVE-2021-26272

    CKEditor: security vulnerability

    also in 9 other products

    		6.5
    HighCVE-2021-41165

    HTML comments vulnerability allowing to execute JavaScript code

    also in 8 other products

    		8.2
    MediumCVE-2022-48110

    CKEditor: Cross-Site Scripting (XSS)

    		6.1
    HighCVE-2011-4972

    CKSource CKEditor Drupal module: security vulnerability

    also in 1 other product

    		7.5
    HighCVE-2026-116688

    CKEditor: Cross-site scripting (XSS) in the engine package

    		8.1
    MediumCVE-2021-26271

    CKEditor: security vulnerability

    also in 6 other products

    		6.5
    MediumCVE-2020-27193

    CKEditor: Cross-Site Scripting (XSS)

    also in 8 other products

    		6.1
    MediumCVE-2021-21254

    Regular expression Denial of Service in Markdown plugin

    		6.5
    MediumCVE-2018-17960

    CKEditor: Cross-Site Scripting (XSS)

    		6.1
    HighCVE-2021-41164

    Advanced Content Filter (ACF) vulnerability allowing to execute JavaScript code using malformed HTML

    also in 9 other products

    		8.2
    MediumCVE-2024-24816

    Cross-site scripting (XSS) vulnerability in samples with enabled the preview feature

    		6.1
    MediumCVE-2021-21391

    Regular expression Denial of Service in multiple packages

    		6.5
    MediumCVE-2018-9861

    Drupal core: Cross-Site Scripting (XSS)

    also in 1 other product

    		6.1
    HighCVE-2021-37695

    Execution of JavaScript code using malformed HTML in ckeditor

    also in 11 other products

    		7.3
    HighCVE-2021-32808

    Cross-site scripting in ckeditor via abuse of undo functionality

    also in 12 other products

    		7.6
    MediumCVE-2020-9440

    CKEditor: Cross-Site Scripting (XSS)

    also in 1 other product

    		6.1
    Not ratedCVE-2012-4000

    CKeditor FCKeditor: Cross-Site Scripting (XSS)

    		—
    MediumCVE-2022-24728

    Cross-site Scripting in CKEditor4

    also in 8 other products

    		5.4
    MediumCVE-2018-11093

    CKEditor CKEditor 5-link: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2021-32809

    Arbitrary HTML injection vulnerability in ckeditor

    also in 9 other products

    		4.6
    MediumCVE-2022-31175

    Cross-site scripting caused by the editor instance destroying process in ckeditor5

    		5.8

    All vulnerabilities in search

    Products

    Products by CKSource
    CKSource CKEditor Drupal module240
    Ckeditor4120
    CKEditor ckeditor5100
    CKeditor FCKeditor40