Login Request a demo
CK
Vendor
Ckeditor
15 products with CVEs on record
48
CVEs
0
On KEV
2
New 30D
Products
CK
ckeditor5
ckeditor
8.1
7 CVEs0 on KEV2 new
CK
Ckeditor
Ckeditor
9.8
24 CVEs0 on KEV0 new
FC
Fckeditor
Ckeditor
–
4 CVEs0 on KEV0 new
CK
Ckeditor5-markdown-gfm
Ckeditor
6.5
2 CVEs0 on KEV0 new
C5
Ckeditor 5-link
Ckeditor
6.1
1 CVEs0 on KEV0 new
CK
Ckeditor5-engine
Ckeditor
6.5
1 CVEs0 on KEV0 new
CK
Ckeditor5-font
Ckeditor
6.5
1 CVEs0 on KEV0 new
CK
Ckeditor5-html-embed
Ckeditor
4.7
1 CVEs0 on KEV0 new
CK
Ckeditor5-html-support
Ckeditor
4.7
1 CVEs0 on KEV0 new
CK
Ckeditor5-image
Ckeditor
6.5
1 CVEs0 on KEV0 new
CK
Ckeditor5-list
Ckeditor
6.5
1 CVEs0 on KEV0 new
CK
Ckeditor5-media-embed
Ckeditor
6.5
1 CVEs0 on KEV0 new
CK
Ckeditor5-paste-from-office
Ckeditor
6.5
1 CVEs0 on KEV0 new
CK
Ckeditor5-widget
Ckeditor
6.5
1 CVEs0 on KEV0 new
EI
Enhanced Image
Ckeditor
6.1
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-116688
New
CK
ckeditor5
ckeditor
8.1–Oct 27CKEditor: Cross-site scripting (XSS) in the engine package
CVE-2026-116687
New
CK
ckeditor5
ckeditor
3.1–Oct 27CKEditor: Cross-site scripting (XSS) in the engine package
CVE-2026-28343
CK
Ckeditor5
Ckeditor
6.1
0%
Mar 5CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture
CVE-2025-61261
CK
Ckeditor5
Ckeditor
5.4
0%
Nov 7A reflected cross-site scripting (XSS) vulnerability in CKeditor v46.1.0 & Angular v18.0.0 allows attackers to execute arbitrary code in the context of a user's browser via…
CVE-2024-45613
CK
Ckeditor5
Ckeditor
6.1
1%
Sep 25CKEditor 5 is a JavaScript rich-text editor
CVE-2024-43407
CK
Ckeditor
Ckeditor
6.1
0%
Aug 21CKEditor4 is an open source what-you-see-is-what-you-get HTML editor
CVE-2024-24816
CK
Ckeditor
Ckeditor
6.1
2%
Feb 7CKEditor4 is an open source what-you-see-is-what-you-get HTML editor
CVE-2024-24815
CK
Ckeditor
Ckeditor
6.1
1%
Feb 7CKEditor4 is an open source what-you-see-is-what-you-get HTML editor
CVE-2023-31541
CK
Ckeditor
Ckeditor
9.8
1%
Jun 13A unrestricted file upload vulnerability was discovered in the ‘Browse and upload images’ feature of the CKEditor v1.2.3 plugin for Redmine, which allows arbitrary files to be…
CVE-2023-28439
CK
Ckeditor
Ckeditor
6.1
1%
Mar 22CKEditor4 is an open source what-you-see-is-what-you-get HTML editor
CVE-2022-48110
CK
Ckeditor
Ckeditor
6.1
2%
Feb 13CKSource CKEditor 5 35.4.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Full Featured CKEditor5 widget
CVE-2022-31175
CK
ckeditor5
ckeditor
4.7
1%
Aug 3Cross-site scripting caused by the editor instance destroying process in ckeditor5
CVE-2022-24729
CK
Ckeditor
Ckeditor
7.5
2%
Mar 16CKEditor4 is an open source what-you-see-is-what-you-get HTML editor
CVE-2022-24728
CK
Ckeditor
Ckeditor
5.4
1%
Mar 16CKEditor4 is an open source what-you-see-is-what-you-get HTML editor
CVE-2021-41165
CK
Ckeditor
Ckeditor
5.4
2%
Nov 17CKEditor4 is an open source WYSIWYG HTML editor
CVE-2021-41164
CK
Ckeditor
Ckeditor
5.4
1%
Nov 17CKEditor4 is an open source WYSIWYG HTML editor
CVE-2021-37695
CK
Ckeditor
Ckeditor
5.4
1%
Aug 13ckeditor is an open source WYSIWYG HTML editor with rich content support
CVE-2021-32809
CK
Ckeditor
Ckeditor
5.4
1%
Aug 12ckeditor is an open source WYSIWYG HTML editor with rich content support
CVE-2021-32808
CK
Ckeditor
Ckeditor
5.4
1%
Aug 12ckeditor is an open source WYSIWYG HTML editor with rich content support
CVE-2021-33829
CK
Ckeditor
Ckeditor
6.1
3%
Jun 9A cross-site scripting (XSS) vulnerability in the HTML Data Processor in CKEditor 4 4.14.0 through 4.16.x before 4.16.1 allows remote attackers to inject executable JavaScript…
CVE-2021-21391
CK
Ckeditor5-font
Ckeditor
6.5
2%
Apr 29CKEditor 5 provides a WYSIWYG editing solution
CVE-2021-21254
CK
Ckeditor5
Ckeditor
6.5
2%
Jan 29CKEditor 5 is an open source rich text editor framework with a modular architecture
CVE-2021-26272
CK
Ckeditor
Ckeditor
6.5
2%
Jan 26It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted URL-like text into the editor, and then press Enter or Space…
CVE-2021-26271
CK
Ckeditor
Ckeditor
6.5
2%
Jan 26It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted text into the Styles input of specific dialogs (in the…
CVE-2020-27193
CK
Ckeditor
Ckeditor
6.1
2%
Nov 12A cross-site scripting (XSS) vulnerability in the Color Dialog plugin for CKEditor 4.15.0 allows remote attackers to run arbitrary web script after persuading a user to copy and…
CVE-2020-9440
CK
Ckeditor
Ckeditor
6.1
1%
Mar 10A cross-site scripting (XSS) vulnerability in the WSC plugin through 5.5.7.5 for CKEditor 4 allows remote attackers to run arbitrary web script inside an IFRAME element by…
CVE-2020-9281
CK
Ckeditor
Ckeditor
6.1
4%
Mar 7A cross-site scripting (XSS) vulnerability in the HTML Data Processor for CKEditor 4.0 before 4.14 allows remote attackers to inject arbitrary web script through a crafted…
CVE-2011-4972
CK
Ckeditor
Ckeditor
7.5
2%
Nov 13hook_file_download in the CKEditor module 7.x-1.4 for Drupal does not properly restrict access to private files, which allows remote attackers to read private files via a direct…
CVE-2018-17960
CK
Ckeditor
Ckeditor
6.1
2%
Nov 14CKEditor 4.x before 4.11.0 allows user-assisted XSS involving a source-mode paste
CVE-2018-11093
C5
Ckeditor 5-link
Ckeditor
6.1
1%
May 22Cross-site scripting (XSS) vulnerability in the Link package for CKEditor 5 before 10.0.1 allows remote attackers to inject arbitrary web script through a crafted href attribute…
CVE-2018-9861
EI
Enhanced Image
Ckeditor
6.1
2%
Apr 19Cross-site scripting (XSS) vulnerability in the Enhanced Image (aka image2) plugin for CKEditor (in versions 4.5.10 through 4.9.1; fixed in 4.9.2), as used in Drupal 8 before…
CVE-2014-5191
CK
Ckeditor
Ckeditor
–
2%
Aug 7Cross-site scripting (XSS) vulnerability in the Preview plugin before 4.4.3 in CKEditor allows remote attackers to inject arbitrary web script or HTML via unspecified vectors
CVE-2014-4037
FC
Fckeditor
Ckeditor
–
3%
Jun 11Cross-site scripting (XSS) vulnerability in editor/dialog/fck_spellerpages/spellerpages/server-scripts/spellchecker.php in FCKeditor before 2.6.11 and earlier allows remote…
CVE-2012-2067
CK
Ckeditor
Ckeditor
–
2%
Sep 5Unspecified vulnerability in the CKeditor module 6.x-2.x before 6.x-2.3 and the CKEditor module 6.x-1.x before 6.x-1.9 and 7.x-1.x before 7.x-1.7 for Drupal, when the core PHP…
CVE-2012-2066
FC
Fckeditor
Ckeditor
–
1%
Sep 5Cross-site scripting (XSS) vulnerability in the FCKeditor module 6.x-2.x before 6.x-2.3 and the CKEditor module 6.x-1.x before 6.x-1.9 and 7.x-1.x before 7.x-1.7 for Drupal allows…
CVE-2012-4000
FC
Fckeditor
Ckeditor
–
4%
Jul 12Cross-site scripting (XSS) vulnerability in the print_textinputs_var function in editor/dialog/fck_spellerpages/spellerpages/server-scripts/spellchecker.php in FCKeditor 2.6.7 and…