Skip to content
OpenAdvisories

Package · Packagist

ckeditor/ckeditor

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.1
    CVE-2024-43407

    Code Snippet GeSHi plugin has reflected cross-site scripting (XSS) vulnerability

    CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A potential vulnerability has been discovered in CKEditor 4 Code Snippet GeSHi plugin. The vulnerability allowed a reflected XSS attack by exploiting a flaw in the GeSHi syntax highlighter …

    ckeditor ckeditor4 ckeditor ckeditor4 Debian Ubuntu npm Packagist
  • Medium 6.1
    CVE-2024-24815

    CKEditor4 Cross-site scripting (XSS) vulnerability caused by incorrect CDATA detection

    CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A cross-site scripting vulnerability has been discovered in the core HTML parsing module in versions of CKEditor4 prior to 4.24.0-lts. It may affect all editor instances that enabled full-p…

    ckeditor ckeditor4 request-tracker4 ldap-account-manager Debian Ubuntu npm Packagist
  • Medium —
    CVE-2014-5191

    The Preview plugin in CKEditor allows Cross-site scripting (XSS)

    Cross-site scripting (XSS) vulnerability in the Preview plugin before 4.4.3 in CKEditor allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

    ckeditor ckeditor3 ckeditor/ckeditor Debian Packagist