Vendor

    CKSource

    9 known vulnerabilities in products by CKSource, 0 of them actively exploited (CISA KEV).

    Key figures

    9

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in CKSource
    HighCVE-2011-4972

    CKSource CKEditor Drupal module: security vulnerability

    also in 1 other product

    		7.5
    HighCVE-2019-15862

    CKSource CKFinder: security vulnerability

    		7.5
    MediumCVE-2023-4771

    Cross-Site Scripting vulnerability in CKSource CKEditor

    		6.1
    MediumCVE-2019-15891

    CKSource CKFinder: security vulnerability

    		5.3
    MediumCVE-2015-9349

    CKSource CKEditor: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2025-63830

    CKSource CKFinder: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2016-20023

    CKSource CKFinder: Relative Path Traversal

    		5.0
    MediumCVE-2025-13980

    CKEditor 5 Premium Features - Moderately critical - Access bypass - SA-CONTRIB-2025-118

    also in 1 other product

    		5.3
    MediumCVE-2024-13245

    Drupal CKEditor 4 LTS - WYSIWYG HTML editor: Cross-site Scripting

    also in 1 other product

    		5.4

    Products

    Products by CKSource
    CKSource CKFinder40