Cckeditor

Products

Exploited and recent CVEs

• CVE-2026-116688 High 8.1 CKEditor: Cross-site scripting (XSS) in the engine package 0.5%
• CVE-2026-116687 Low 3.1 CKEditor: Cross-site scripting (XSS) in the engine package 0.3%
• CVE-2026-28343 Medium 6.4 CKEditor: Cross-site scripting (XSS) in the HTML Support package 0.3%
• CVE-2025-58064 Low 2.3 CKEditor is susceptible to Cross-Site Scripting (XSS) through its clipboard package 0.4%
• CVE-2025-25299 Low 2.3 Cross-site scripting (XSS) in the real-time collaboration package 0.6%
• CVE-2024-45613 Medium 5.1 CKEditor 5 has Cross-site Scripting vulnerability in the clipboard package 0.5%
• CVE-2024-43411 Low 3.1 CKEditor4 has a low risk cross-site scripting (XSS) vulnerability from domain takeover 0.4%
• CVE-2024-43407 Medium 6.1 Code Snippet GeSHi plugin has reflected cross-site scripting (XSS) vulnerability 0.4%
• CVE-2024-24816 Medium 6.1 Cross-site scripting (XSS) vulnerability in samples with enabled the preview feature 1.7%
• CVE-2024-24815 Medium 6.1 CKEditor4 Cross-site scripting (XSS) vulnerability caused by incorrect CDATA detection 0.7%
• CVE-2023-28439 Medium 4.7 ckeditor4 plugins vulnerable to cross-site scripting caused by the editor instance destroying process 0.7%
• CVE-2022-31175 Medium 5.8 Cross-site scripting caused by the editor instance destroying process in ckeditor5 0.9%
• CVE-2022-24729 Medium 6.5 Regular expression Denial of Service in dialog plugin 2.5%
• CVE-2022-24728 Medium 5.4 Cross-site Scripting in CKEditor4 1.2%
• CVE-2021-41165 High 8.2 HTML comments vulnerability allowing to execute JavaScript code 1.6%
• CVE-2021-41164 High 8.2 Advanced Content Filter (ACF) vulnerability allowing to execute JavaScript code using malformed HTML 1.3%
• CVE-2021-37695 High 7.3 Execution of JavaScript code using malformed HTML in ckeditor 1.3%
• CVE-2021-32809 Medium 4.6 Arbitrary HTML injection vulnerability in ckeditor 1.2%
• CVE-2021-32808 High 7.6 Cross-site scripting in ckeditor via abuse of undo functionality 1.2%
• CVE-2021-21391 Medium 6.5 Regular expression Denial of Service in multiple packages 1.7%
• CVE-2021-21254 Medium 6.5 Regular expression Denial of Service in Markdown plugin 1.8%