Vendors / ckeditor Records 39 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 7
Exploited now ckeditor records in CISA KEV No ckeditor vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 58
A reflected cross-site scripting (XSS) vulnerability in CKeditor v46.1.0 & Angular v18.0.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload.
CVSS 3.1 MEDIUM 5.4· Network · No auth · User interaction · EPSS 0.00285 · Published 2025-11-07 · No fix listed CWE-79
Priority LOW 32
CKEditor 5 is an open source rich text editor framework with a modular architecture.
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01814 · Published 2021-01-29 · Fixed in 25.0.0 CWE-400
Priority LOW 28
CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture.
CVSS 3.1 MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00319 · Published 2026-03-05 · Fixed in 47.6.0 CWE-79
Priority LOW 24
CKEditor 5 is a JavaScript rich-text editor.
CVSS 4.0 MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00524 · Published 2024-09-25 · Fixed in 43.1.1 CWE-79
Open these records in search → All records by CVSS severity
1 7 27 4 0
