All products

ckeditor/ckeditor

Composer · Package
4 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
CKEditor4 Cross-site Scripting vulnerability caused by incorrect CDATA detectionCVE-2024-24815 · GHSA-FQ6H-4G8V-QQVM ckeditor/ckeditorckeditor4 Composernpm Medium Fix reported
The Preview plugin in CKEditor allows Cross-site scripting (XSS)CVE-2014-5191 · GHSA-V27H-J97P-WQMX ckeditor/ckeditor Composer Medium Fix reported
Code Snippet GeSHi plugin in CKEditor 4 has reflected cross-site scripting (XSS) vulnerabilityCVE-2024-43407 · GHSA-7R32-VFJ5-C2JV ckeditor/ckeditorckeditor4 Composernpm Medium Fix reported
HTML comments vulnerability allowing to execute JavaScript codeCVE-2021-41165 · GHSA-7H26-63M7-QHF2 ckeditor/ckeditorckeditor4 Composernpm High Fix reported