Product by CKSource

    Ckeditor4

    15 known vulnerabilities in Ckeditor4 (CKSource), 0 of them actively exploited (CISA KEV).

    Key figures

    15

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Ckeditor4 (CKSource)
    MediumCVE-2020-9281

    CKEditor: Cross-Site Scripting (XSS)

    also in 10 other products

    		6.1
    HighCVE-2022-24729

    Regular expression Denial of Service in dialog plugin

    also in 9 other products

    		6.5
    MediumCVE-2021-26272

    CKEditor: security vulnerability

    also in 10 other products

    		6.5
    HighCVE-2021-41165

    HTML comments vulnerability allowing to execute JavaScript code

    also in 9 other products

    		8.2
    MediumCVE-2020-27193

    CKEditor: Cross-Site Scripting (XSS)

    also in 9 other products

    		6.1
    HighCVE-2021-41164

    Advanced Content Filter (ACF) vulnerability allowing to execute JavaScript code using malformed HTML

    also in 10 other products

    		8.2
    MediumCVE-2024-24816

    Cross-site scripting (XSS) vulnerability in samples with enabled the preview feature

    also in 1 other product

    		6.1
    HighCVE-2021-37695

    Execution of JavaScript code using malformed HTML in ckeditor

    also in 12 other products

    		7.3
    HighCVE-2021-32808

    Cross-site scripting in ckeditor via abuse of undo functionality

    also in 13 other products

    		7.6
    MediumCVE-2022-24728

    Cross-site Scripting in CKEditor4

    also in 9 other products

    		5.4
    MediumCVE-2021-32809

    Arbitrary HTML injection vulnerability in ckeditor

    also in 10 other products

    		4.6
    MediumCVE-2024-24815

    CKEditor4 Cross-site scripting (XSS) vulnerability caused by incorrect CDATA detection

    also in 1 other product

    		6.1
    MediumCVE-2023-28439

    Ckeditor4: Cross-site Scripting

    also in 2 other products

    		4.7
    MediumCVE-2024-43407

    Code Snippet GeSHi plugin has reflected cross-site scripting (XSS) vulnerability

    also in 1 other product

    		6.1
    LowCVE-2024-43411

    CKEditor4 has a low risk cross-site scripting (XSS) vulnerability from domain takeover

    		3.1

    All products by CKSource