Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

ckeditor ckeditor vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2

CVE-2014-5191

Cross-site scripting (XSS) vulnerability in the Preview plugin prior to 4.4.3 in CKEditor allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Ckeditor CkeditorCkeditor Ckeditor 4.4.0Ckeditor Ckeditor 4.4.1
4.3
CVSSv2

CVE-2012-4000

Cross-site scripting (XSS) vulnerability in the print_textinputs_var function in editor/dialog/fck_spellerpages/spellerpages/server-scripts/spellchecker.php in FCKeditor 2.6.7 and previous versions allows remote malicious users to inject arbitrary web script or HTML via textinput...
Ckeditor FckeditorCkeditor Fckeditor 0.8Ckeditor Fckeditor 0.8.5Ckeditor Fckeditor 0.9.0Ckeditor Fckeditor 0.9.1Ckeditor Fckeditor 0.9.2Ckeditor Fckeditor 0.9.3Ckeditor Fckeditor 0.9.4Ckeditor Fckeditor 0.9.5Ckeditor Fckeditor 1.0Ckeditor Fckeditor 1.1Ckeditor Fckeditor 1.2
4.3
CVSSv2

CVE-2012-2066

Cross-site scripting (XSS) vulnerability in the FCKeditor module 6.x-2.x prior to 6.x-2.3 and the CKEditor module 6.x-1.x prior to 6.x-1.9 and 7.x-1.x prior to 7.x-1.7 for Drupal allows remote authenticated users or remote malicious users to inject arbitrary web script or HTML vi...
Ckeditor Fckeditor 6.x-1.1Ckeditor Fckeditor 6.x-1.2Ckeditor Fckeditor 6.x-1.2-1Ckeditor Fckeditor 6.x-1.3Ckeditor Fckeditor 6.x-1.4Ckeditor Fckeditor 6.x-1.xCkeditor Fckeditor 6.x-2.0Ckeditor Fckeditor 6.x-2.1Ckeditor Fckeditor 6.x-2.2Ckeditor Fckeditor 6.x-2.3Ckeditor Fckeditor 6.x-2.xCkeditor Ckeditor 6.x-1.0
6.8
CVSSv2

CVE-2012-2067

Unspecified vulnerability in the CKeditor module 6.x-2.x prior to 6.x-2.3 and the CKEditor module 6.x-1.x prior to 6.x-1.9 and 7.x-1.x prior to 7.x-1.7 for Drupal, when the core PHP module is enabled, allows remote authenticated users or remote malicious users to execute arbitrar...
Ckeditor Fckeditor 6.x-1.1Ckeditor Fckeditor 6.x-1.2Ckeditor Fckeditor 6.x-1.2-1Ckeditor Fckeditor 6.x-1.3Ckeditor Fckeditor 6.x-1.4Ckeditor Fckeditor 6.x-1.xCkeditor Fckeditor 6.x-2.0Ckeditor Fckeditor 6.x-2.1Ckeditor Fckeditor 6.x-2.2Ckeditor Fckeditor 6.x-2.3Ckeditor Fckeditor 6.x-2.xCkeditor Ckeditor 6.x-1.0
4.3
CVSSv2

CVE-2021-21391

CKEditor 5 provides a WYSIWYG editing solution. This CVE affects the following npm packages: ckeditor5-engine, ckeditor5-font, ckeditor5-image, ckeditor5-list, ckeditor5-markdown-gfm, ckeditor5-media-embed, ckeditor5-paste-from-office, and ckeditor5-widget. Following an internal ...
Ckeditor Ckeditor5-engineCkeditor Ckeditor5-fontCkeditor Ckeditor5-imageCkeditor Ckeditor5-listCkeditor Ckeditor5-markdown-gfmCkeditor Ckeditor5-media-embedCkeditor Ckeditor5-paste-from-officeCkeditor Ckeditor5-widget
6.1
CVSSv3

CVE-2024-43407

CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A potential vulnerability has been discovered in CKEditor 4 Code Snippet GeSHi plugin. The vulnerability allowed a reflected XSS attack by exploiting a flaw in the GeSHi syntax highlighter library hosted by the...
Ckeditor Ckeditor
6.1
CVSSv3

CVE-2024-24815

CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A cross-site scripting vulnerability has been discovered in the core HTML parsing module in versions of CKEditor4 before 4.24.0-lts. It may affect all editor instances that enabled full-page editing mode or ena...
Ckeditor Ckeditor
6.1
CVSSv3

CVE-2024-24816

CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A cross-site scripting vulnerability vulnerability has been discovered in versions before 4.24.0-lts in samples that use the `preview` feature. All integrators that use these samples in the production code can ...
Ckeditor Ckeditor
4.3
CVSSv2

CVE-2018-17960

CKEditor 4.x prior to 4.11.0 allows user-assisted XSS involving a source-mode paste.
Ckeditor Ckeditor
9.8
CVSSv3

CVE-2023-31541

A unrestricted file upload vulnerability exists in the ‘Browse and upload images’ feature of the CKEditor v1.2.3 plugin for Redmine, which allows arbitrary files to be uploaded to the server.
Ckeditor Ckeditor 1.2.3
Preferred Score:
CVSSv2
CVSSv2
CVSSv3
CVSSv4
EPSS
VMScore
Recommendations:
desktop browserurbancode velocityCVE-2024-57932CVE-2025-21655CVE-2024-12084CVE-2023-34960unauthorizedCSRFCVE-2024-57913privilegeCVE-2025-21649itsourcecodecp-xr-de21-s router
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook