Skip to content
OpenAdvisories

Product · ckeditor

ckeditor4

12 known vulnerabilities.

1 result · Clear filters · Feed

  • Low 3.1

    CKEditor4 has a low risk cross-site scripting (XSS) vulnerability from domain takeover

    CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A theoretical vulnerability has been identified in CKEditor 4.22 (and above). In a highly unlikely scenario where an attacker gains control over the https://cke4.ckeditor.com domain, they c…