Skip to content
OpenAdvisories

Package · Debian

ckeditor3

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

8 results · Feed

  • Medium 6.1
    CVE-2024-24816 Public exploit

    Cross-site scripting (XSS) vulnerability in samples with enabled the preview feature

    CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A cross-site scripting vulnerability vulnerability has been discovered in versions prior to 4.24.0-lts in samples that use the `preview` feature. All integrators that use these samples in t…

    ckeditor ckeditor4 request-tracker4 ldap-account-manager Debian Ubuntu npm
  • Medium 6.1
    CVE-2024-24815

    CKEditor4 Cross-site scripting (XSS) vulnerability caused by incorrect CDATA detection

    CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A cross-site scripting vulnerability has been discovered in the core HTML parsing module in versions of CKEditor4 prior to 4.24.0-lts. It may affect all editor instances that enabled full-p…

    ckeditor ckeditor4 request-tracker4 ldap-account-manager Debian Ubuntu npm Packagist
  • Medium 4.7
    CVE-2023-28439

    ckeditor4 plugins vulnerable to cross-site scripting caused by the editor instance destroying process

    CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A cross-site scripting vulnerability has been discovered affecting Iframe Dialog and Media Embed packages. The vulnerability may trigger a JavaScript code after fulfilling special condition…

    ckeditor ckeditor4 request-tracker4 ldap-account-manager Debian Ubuntu
  • Medium 5.4
    CVE-2022-24728

    Cross-site Scripting in CKEditor4

    CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A vulnerability has been discovered in the core HTML processing module and may affect all plugins used by CKEditor 4 prior to version 4.18.0. The vulnerability allows someone to inject malf…

    ckeditor ckeditor4 drupal/core request-tracker4 Debian Ubuntu npm Packagist
  • High 8.2
    CVE-2021-41165

    HTML comments vulnerability allowing to execute JavaScript code

    CKEditor4 is an open source WYSIWYG HTML editor. In affected version a vulnerability has been discovered in the core HTML processing module and may affect all plugins used by CKEditor 4. The vulnerability allowed to inject malformed comments HTML bypassing co…

    ckeditor ckeditor4 request-tracker4 ldap-account-manager Debian Ubuntu npm Packagist
  • Medium 6.1
    CVE-2021-33829

    ckeditor4 vulnerable to cross-site scripting

    A cross-site scripting (XSS) vulnerability in the HTML Data Processor in CKEditor 4 4.14.0 through 4.16.x before 4.16.1 allows remote attackers to inject executable JavaScript code through a crafted comment because --!> is mishandled.

    drupal/core drupal/drupal ckeditor ckeditor Debian Ubuntu npm Packagist
  • Medium 6.1
    CVE-2018-17960

    Ckeditor XSS Vulnerability

    CKEditor 4.x before 4.11.0 allows user-assisted XSS involving a source-mode paste.

    typo3/cms typo3/cms-core ckeditor ckeditor Debian Ubuntu npm Packagist
  • Medium —
    CVE-2014-5191

    The Preview plugin in CKEditor allows Cross-site scripting (XSS)

    Cross-site scripting (XSS) vulnerability in the Preview plugin before 4.4.3 in CKEditor allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

    ckeditor ckeditor3 ckeditor/ckeditor Debian Packagist