Skip to content
OpenAdvisories

Package · Debian

ckeditor3

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 6.1
    CVE-2024-24816 Public exploit

    Cross-site scripting (XSS) vulnerability in samples with enabled the preview feature

    CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A cross-site scripting vulnerability vulnerability has been discovered in versions prior to 4.24.0-lts in samples that use the `preview` feature. All integrators that use these samples in t…

    ckeditor ckeditor4 request-tracker4 ldap-account-manager Debian Ubuntu npm
  • Medium 6.1
    CVE-2024-24815

    CKEditor4 Cross-site scripting (XSS) vulnerability caused by incorrect CDATA detection

    CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A cross-site scripting vulnerability has been discovered in the core HTML parsing module in versions of CKEditor4 prior to 4.24.0-lts. It may affect all editor instances that enabled full-p…

    ckeditor ckeditor4 request-tracker4 ldap-account-manager Debian Ubuntu npm Packagist
  • Medium 4.7
    CVE-2023-28439

    ckeditor4 plugins vulnerable to cross-site scripting caused by the editor instance destroying process

    CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A cross-site scripting vulnerability has been discovered affecting Iframe Dialog and Media Embed packages. The vulnerability may trigger a JavaScript code after fulfilling special condition…

    ckeditor ckeditor4 request-tracker4 ldap-account-manager Debian Ubuntu
  • Medium 5.4
    CVE-2022-24728

    Cross-site Scripting in CKEditor4

    CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A vulnerability has been discovered in the core HTML processing module and may affect all plugins used by CKEditor 4 prior to version 4.18.0. The vulnerability allows someone to inject malf…

    ckeditor ckeditor4 drupal/core request-tracker4 Debian Ubuntu npm Packagist
  • Medium 6.1
    CVE-2021-33829

    ckeditor4 vulnerable to cross-site scripting

    A cross-site scripting (XSS) vulnerability in the HTML Data Processor in CKEditor 4 4.14.0 through 4.16.x before 4.16.1 allows remote attackers to inject executable JavaScript code through a crafted comment because --!> is mishandled.

    drupal/core drupal/drupal ckeditor ckeditor Debian Ubuntu npm Packagist
  • Medium 6.1
    CVE-2018-17960

    Ckeditor XSS Vulnerability

    CKEditor 4.x before 4.11.0 allows user-assisted XSS involving a source-mode paste.

    typo3/cms typo3/cms-core ckeditor ckeditor Debian Ubuntu npm Packagist
  • Medium —
    CVE-2014-5191

    The Preview plugin in CKEditor allows Cross-site scripting (XSS)

    Cross-site scripting (XSS) vulnerability in the Preview plugin before 4.4.3 in CKEditor allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

    ckeditor ckeditor3 ckeditor/ckeditor Debian Packagist