Product by CKSource

    CKEditor ckeditor5

    11 known vulnerabilities in CKEditor ckeditor5 (CKSource), 0 of them actively exploited (CISA KEV).

    Key figures

    11

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in CKEditor ckeditor5 (CKSource)
    MediumCVE-2022-48110

    CKEditor: Cross-Site Scripting (XSS)

    also in 1 other product

    		6.1
    HighCVE-2026-116688

    CKEditor: Cross-site scripting (XSS) in the engine package

    		8.1
    MediumCVE-2021-21254

    Regular expression Denial of Service in Markdown plugin

    		6.5
    MediumCVE-2021-21391

    Regular expression Denial of Service in multiple packages

    		6.5
    MediumCVE-2022-31175

    Cross-site scripting caused by the editor instance destroying process in ckeditor5

    		5.8
    MediumCVE-2024-45613

    CKEditor 5 has Cross-site Scripting vulnerability in the clipboard package

    		6.1
    MediumCVE-2026-28343

    CKEditor: Cross-site scripting (XSS) in the HTML Support package

    		6.4
    LowCVE-2026-116687

    CKEditor: Cross-site scripting (XSS) in the engine package

    		3.1
    MediumCVE-2025-61261

    Angular: Cross-Site Scripting (XSS)

    also in 1 other product

    		5.4
    LowCVE-2025-25299

    Cross-site scripting (XSS) in the real-time collaboration package

    		—
    LowCVE-2025-58064

    CKEditor is susceptible to Cross-Site Scripting (XSS) through its clipboard package

    		—

    All products by CKSource