Skip to content
OpenAdvisories

Package · npm

ckeditor5-premium-features

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Low 2.3
    CVE-2025-25299

    Cross-site scripting (XSS) in the real-time collaboration package

    CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture. During a recent internal audit, a Cross-Site Scripting (XSS) vulnerability was discovered in the CKEditor 5 real-time collaboration package. This vulnerability affects user markers, …

    ckeditor ckeditor5 request-tracker4 ldap-account-manager Ubuntu npm