CK
Vendor
Cksource
8
CVEs
0
On KEV
0
New 30D
Products
CK7.5
CKFinder
CKSource
4 CVEs0 on KEV0 new
CK6.1
Ckeditor
Cksource
2 CVEs0 on KEV0 new
C45.4
Ckeditor 4
Cksource
1 CVEs0 on KEV0 new
C55.3
Ckeditor 5 Premium Features
Cksource
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-13980 | C5 Ckeditor 5 Premium Features Cksource | 5.3 | Jan 28 | CKEditor 5 Premium Features - Moderately critical - Access bypass - SA-CONTRIB-2025-118 |
| CVE-2016-20023 | CK CKFinder CKSource | 6.5 | Dec 5 | In CKSource CKFinder before 2.5.0.1 for ASP.NET, authenticated users could download any file from the server if the correct path to a file was provided |
| CVE-2025-63830 | CK Ckfinder Cksource | 6.1 | Nov 14 | CKFinder 1.4.3 is vulnerable to Cross Site Scripting (XSS) in the File Upload function |
| CVE-2024-13245 | C4 Ckeditor 4 Cksource | 5.4 | Jan 9 | CKEditor 4 LTS - WYSIWYG HTML editor - Moderately critical - Cross Site Scripting - SA-CONTRIB-2024-009 |
| CVE-2023-4771 | CK Ckeditor Cksource | 6.1 | Nov 16 | A Cross-Site scripting vulnerability has been found in CKSource CKEditor affecting versions 4.15.1 and earlier |
| CVE-2019-15891 | CK Ckfinder Cksource | 5.3 | Sep 26 | An issue was discovered in CKFinder through 2.6.2.1 and 3.x through 3.5.0 |
| CVE-2019-15862 | CK Ckfinder Cksource | 7.5 | Sep 26 | An issue was discovered in CKFinder through 2.6.2.1 |
| CVE-2015-9349 | CK Ckeditor Cksource | 6.1 | Aug 27 | The ckeditor-for-wordpress plugin before 4.5.3.1 for WordPress has reflected XSS in the "built-in (old)" file browser |