ckeditor

4 results · Clear filters · Feed

• High 8.2
  CVE-2021-41165

  HTML comments vulnerability allowing to execute JavaScript code

  CKEditor4 is an open source WYSIWYG HTML editor. In affected version a vulnerability has been discovered in the core HTML processing module and may affect all plugins used by CKEditor 4. The vulnerability allowed to inject malformed comments HTML bypassing co…

  ckeditor ckeditor4 request-tracker4 ldap-account-manager Debian Ubuntu npm Packagist
  Nov 17, 2021
• High 8.2
  CVE-2021-41164

  Advanced Content Filter (ACF) vulnerability allowing to execute JavaScript code using malformed HTML

  CKEditor4 is an open source WYSIWYG HTML editor. In affected versions a vulnerability has been discovered in the Advanced Content Filter (ACF) module and may affect all plugins used by CKEditor 4. The vulnerability allowed to inject malformed HTML bypassing c…

  ckeditor ckeditor4 request-tracker4 ldap-account-manager Debian Ubuntu npm
  Nov 17, 2021
• High 7.3
  CVE-2021-37695

  Execution of JavaScript code using malformed HTML in ckeditor

  ckeditor is an open source WYSIWYG HTML editor with rich content support. A potential vulnerability has been discovered in CKEditor 4 [Fake Objects](https://ckeditor.com/cke4/addon/fakeobjects) package. The vulnerability allowed to inject malformed Fake Objec…

  ckeditor ckeditor4 request-tracker4 ldap-account-manager Debian Ubuntu npm
  Aug 12, 2021
• High 7.6
  CVE-2021-32808

  Cross-site scripting in ckeditor via abuse of undo functionality

  ckeditor is an open source WYSIWYG HTML editor with rich content support. A vulnerability has been discovered in the clipboard Widget plugin if used alongside the undo feature. The vulnerability allows a user to abuse undo functionality using malformed widget…

  ckeditor ckeditor4 ckeditor ckeditor4 Debian npm
  Aug 12, 2021