Skip to content
OpenAdvisories

Package · npm

@ckeditor/ckeditor5-html-support

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 6.4
    CVE-2026-28343

    CKEditor: Cross-site scripting (XSS) in the HTML Support package

    CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture. Starting in version 29.0.0 and prior to version 47.6.0, a cross-site scripting (XSS) vulnerability has been discovered in the General HTML Support feature. This vulnerability could b…

    ckeditor ckeditor5 request-tracker4 ldap-account-manager Ubuntu npm
  • Medium 5.8
    CVE-2022-31175

    Cross-site scripting caused by the editor instance destroying process in ckeditor5

    CKEditor 5 is a JavaScript rich text editor. A cross-site scripting vulnerability has been discovered affecting three optional CKEditor 5's packages in versions prior to 35.0.1. The vulnerability allowed to trigger a JavaScript code after fulfilling special c…

    ckeditor ckeditor5 request-tracker4 ldap-account-manager Ubuntu npm