ckeditor/ckeditor

4 results · Feed

• Medium 6.1
  CVE-2024-43407

  Code Snippet GeSHi plugin has reflected cross-site scripting (XSS) vulnerability

  CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A potential vulnerability has been discovered in CKEditor 4 Code Snippet GeSHi plugin. The vulnerability allowed a reflected XSS attack by exploiting a flaw in the GeSHi syntax highlighter …

  ckeditor ckeditor4 ckeditor ckeditor4 Debian Ubuntu npm Packagist
  Aug 21, 2024
• Medium 6.1
  CVE-2024-24815

  CKEditor4 Cross-site scripting (XSS) vulnerability caused by incorrect CDATA detection

  CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A cross-site scripting vulnerability has been discovered in the core HTML parsing module in versions of CKEditor4 prior to 4.24.0-lts. It may affect all editor instances that enabled full-p…

  ckeditor ckeditor4 request-tracker4 ldap-account-manager Debian Ubuntu npm Packagist
  Feb 7, 2024
• High 8.2
  CVE-2021-41165

  HTML comments vulnerability allowing to execute JavaScript code

  CKEditor4 is an open source WYSIWYG HTML editor. In affected version a vulnerability has been discovered in the core HTML processing module and may affect all plugins used by CKEditor 4. The vulnerability allowed to inject malformed comments HTML bypassing co…

  ckeditor ckeditor4 request-tracker4 ldap-account-manager Debian Ubuntu npm Packagist
  Nov 17, 2021
• Medium —
  CVE-2014-5191

  The Preview plugin in CKEditor allows Cross-site scripting (XSS)

  Cross-site scripting (XSS) vulnerability in the Preview plugin before 4.4.3 in CKEditor allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  ckeditor ckeditor3 ckeditor/ckeditor Debian Packagist
  Aug 7, 2014