ckeditor4

7 results · Clear filters · Feed

• Medium 6.1
  CVE-2024-43407

  Code Snippet GeSHi plugin has reflected cross-site scripting (XSS) vulnerability

  CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A potential vulnerability has been discovered in CKEditor 4 Code Snippet GeSHi plugin. The vulnerability allowed a reflected XSS attack by exploiting a flaw in the GeSHi syntax highlighter …

  ckeditor ckeditor4 ckeditor ckeditor4 Debian Ubuntu npm Packagist
  Aug 21, 2024
• Medium 6.1
  CVE-2024-24816 Public exploit

  Cross-site scripting (XSS) vulnerability in samples with enabled the preview feature

  CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A cross-site scripting vulnerability vulnerability has been discovered in versions prior to 4.24.0-lts in samples that use the `preview` feature. All integrators that use these samples in t…

  ckeditor ckeditor4 request-tracker4 ldap-account-manager Debian Ubuntu npm
  Feb 7, 2024
• Medium 6.1
  CVE-2024-24815

  CKEditor4 Cross-site scripting (XSS) vulnerability caused by incorrect CDATA detection

  CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A cross-site scripting vulnerability has been discovered in the core HTML parsing module in versions of CKEditor4 prior to 4.24.0-lts. It may affect all editor instances that enabled full-p…

  ckeditor ckeditor4 request-tracker4 ldap-account-manager Debian Ubuntu npm Packagist
  Feb 7, 2024
• Medium 4.7
  CVE-2023-28439

  ckeditor4 plugins vulnerable to cross-site scripting caused by the editor instance destroying process

  CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A cross-site scripting vulnerability has been discovered affecting Iframe Dialog and Media Embed packages. The vulnerability may trigger a JavaScript code after fulfilling special condition…

  ckeditor ckeditor4 request-tracker4 ldap-account-manager Debian Ubuntu
  Mar 22, 2023
• Medium 5.4
  CVE-2022-24728

  Cross-site Scripting in CKEditor4

  CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A vulnerability has been discovered in the core HTML processing module and may affect all plugins used by CKEditor 4 prior to version 4.18.0. The vulnerability allows someone to inject malf…

  ckeditor ckeditor4 drupal/core request-tracker4 Debian Ubuntu npm Packagist
  Mar 16, 2022
• Medium 6.5
  CVE-2022-24729

  Regular expression Denial of Service in dialog plugin

  CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. CKEditor4 prior to version 4.18.0 contains a vulnerability in the `dialog` plugin. The vulnerability allows abuse of a dialog input validator regular expression, which can cause a significa…

  ckeditor ckeditor4 request-tracker4 ldap-account-manager Debian Ubuntu
  Mar 16, 2022
• Medium 4.6
  CVE-2021-32809

  Arbitrary HTML injection vulnerability in ckeditor

  ckeditor is an open source WYSIWYG HTML editor with rich content support. A potential vulnerability has been discovered in CKEditor 4 [Clipboard](https://ckeditor.com/cke4/addon/clipboard) package. The vulnerability allowed to abuse paste functionality using …

  ckeditor ckeditor4 ckeditor ckeditor Debian Ubuntu npm
  Aug 12, 2021