Skip to content
OpenAdvisories

Archive

20 February 2025

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Low 2.3

    Cross-site scripting (XSS) in the real-time collaboration package

    CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture. During a recent internal audit, a Cross-Site Scripting (XSS) vulnerability was discovered in the CKEditor 5 real-time collaboration package. This vulnerability affects user markers, …