Skip to content
OpenAdvisories

Vendor

CKSource

3 known vulnerabilities.

Products

CKFinder 1 CKEditor Drupal module 1 CKEditor 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.0
    CVE-2016-20023

    In CKSource CKFinder before 2.5.0.1 for ASP.NET, authenticated users could download any file from the server if the cor…

    CKSource CKFinder
  • Medium 6.1
    CVE-2023-4771

    Cross-Site Scripting vulnerability in CKSource CKEditor

    A Cross-Site scripting vulnerability has been found in CKSource CKEditor affecting versions 4.15.1 and earlier. An attacker could send malicious javascript code through the /ckeditor/samples/old/ajax.html file and retrieve an authorized user's information.

    CKSource CKEditor request-tracker4 ldap-account-manager Debian Ubuntu npm