Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

ckeditor Security Vulnerabilities | CyStack CVE Database

Vulnerability	Exploitation status	Fix	Affected product	Published	Severity

`CVE-2026-28343`CKEditor: Cross-site scripting (XSS) in the HTML Support package	Exploitation statusNot known exploited	FixYes	Affected productckeditor5	Published03/05/2026	SeverityMedium
`CVE-2025-61261`	Exploitation statusPublic exploit	FixNot confirmed	Affected productNot confirmed	Published11/07/2025	SeverityMedium
`CVE-2025-58064`CKEditor is susceptible to Cross-Site Scripting (XSS) through its clipboard package	Exploitation statusNot known exploited	FixYes	Affected productckeditor5	Published09/03/2025	SeverityLow
`CVE-2025-25299`Cross-site scripting (XSS) in the real-time collaboration package	Exploitation statusNot known exploited	FixYes	Affected productckeditor5	Published02/20/2025	SeverityLow
`CVE-2024-45613`CKEditor 5 has Cross-site Scripting vulnerability in the clipboard package	Exploitation statusNot known exploited	FixNot confirmed	Affected productckeditor5	Published09/25/2024	SeverityMedium
`CVE-2024-43411`CKEditor4 has a low risk cross-site scripting (XSS) vulnerability from domain takeover	Exploitation statusNot known exploited	FixYes	Affected productckeditor4	Published08/21/2024	SeverityLow
`CVE-2024-43407`Code Snippet GeSHi plugin has reflected cross-site scripting (XSS) vulnerability	Exploitation statusNot known exploited	FixNot confirmed	Affected productckeditor4	Published08/21/2024	SeverityMedium
`CVE-2024-24816`Cross-site scripting (XSS) vulnerability in samples with enabled the preview feature	Exploitation statusNot known exploited	FixYes	Affected productckeditor4	Published02/07/2024	SeverityMedium
`CVE-2024-24815`CKEditor4 Cross-site scripting (XSS) vulnerability caused by incorrect CDATA detection	Exploitation statusNot known exploited	FixYes	Affected productckeditor4	Published02/07/2024	SeverityMedium
`CVE-2023-31541`	Exploitation statusPublic exploit	FixNot confirmed	Affected productNot confirmed	Published06/13/2023	SeverityCritical
`CVE-2023-28439`ckeditor4 plugins vulnerable to cross-site scripting caused by the editor instance destroying process	Exploitation statusNot known exploited	FixYes	Affected productckeditor4	Published03/22/2023	SeverityMedium
`CVE-2022-48110`	Exploitation statusNot known exploited	FixNot confirmed	Affected productNot confirmed	Published02/13/2023	SeverityMedium
`CVE-2022-31175`Cross-site scripting caused by the editor instance destroying process in ckeditor5	Exploitation statusNot known exploited	FixYes	Affected productckeditor5	Published08/03/2022	SeverityMedium
`CVE-2022-24728`Cross-site Scripting in CKEditor4	Exploitation statusNot known exploited	FixYes	Affected productckeditor4	Published03/16/2022	SeverityMedium
`CVE-2022-24729`Regular expression Denial of Service in dialog plugin	Exploitation statusNot known exploited	FixYes	Affected productckeditor4	Published03/16/2022	SeverityMedium
`CVE-2021-41165`HTML comments vulnerability allowing to execute JavaScript code	Exploitation statusNot confirmed	FixNot confirmed	Affected productckeditor4	Published11/17/2021	SeverityHigh
`CVE-2021-41164`Advanced Content Filter (ACF) vulnerability allowing to execute JavaScript code using malformed HTML	Exploitation statusNot confirmed	FixNot confirmed	Affected productckeditor4	Published11/17/2021	SeverityHigh
`CVE-2021-37695`Execution of JavaScript code using malformed HTML in ckeditor	Exploitation statusNot confirmed	FixNot confirmed	Affected productckeditor4	Published08/12/2021	SeverityHigh
`CVE-2021-32809`Arbitrary HTML injection vulnerability in ckeditor	Exploitation statusNot confirmed	FixNot confirmed	Affected productckeditor4	Published08/12/2021	SeverityMedium
`CVE-2021-32808`Cross-site scripting in ckeditor via abuse of undo functionality	Exploitation statusNot confirmed	FixNot confirmed	Affected productckeditor4	Published08/12/2021	SeverityHigh
`CVE-2021-33829`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published06/09/2021	SeverityUnknown
`CVE-2021-21391`Regular expression Denial of Service in multiple packages	Exploitation statusNot confirmed	FixNot confirmed	Affected productckeditor5	Published04/29/2021	SeverityMedium
`CVE-2021-21254`Regular expression Denial of Service in Markdown plugin	Exploitation statusNot confirmed	FixNot confirmed	Affected productckeditor5	Published01/29/2021	SeverityMedium
`CVE-2021-26272`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published01/26/2021	SeverityUnknown
`CVE-2021-26271`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published01/26/2021	SeverityUnknown
`CVE-2020-27193`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published11/12/2020	SeverityUnknown
`CVE-2020-9440`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published03/10/2020	SeverityUnknown
`CVE-2020-9281`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published03/07/2020	SeverityUnknown
`CVE-2011-4972`	Exploitation statusNot confirmed	FixNot confirmed	Affected productCKEditor Drupal module	Published11/13/2019	SeverityUnknown
`CVE-2018-17960`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published11/14/2018	SeverityUnknown
`CVE-2018-11093`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published05/22/2018	SeverityUnknown
`CVE-2018-9861`	Exploitation statusNot confirmed	FixYes	Affected productNot confirmed	Published04/19/2018	SeverityUnknown
`CVE-2014-5191`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published08/07/2014	SeverityUnknown
`CVE-2014-4037`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published06/11/2014	SeverityUnknown
`CVE-2012-2066`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published09/05/2012	SeverityUnknown
`CVE-2012-2067`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published09/05/2012	SeverityUnknown
`CVE-2012-4000`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published07/12/2012	SeverityUnknown

37 / 37 Results

All vulnerabilities loaded

Security vulnerabilities from ckeditor

ckeditor

Filters

Run an in-depth assessment with complete web risk management

Popular ckeditor products

ckeditor4

ckeditor5