ckeditor

Records39All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high7CVSS 7.0–8.9

Exploited now

ckeditor records in CISA KEV

No ckeditor vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Ckeditor 24 records HIGH Ckeditor5 4 records MEDIUM Fckeditor 4 records LOW Ckeditor5-markdown-gfm 2 records LOW Ckeditor5-engine 1 record LOW Ckeditor5-font 1 record LOW Ckeditor5-html-embed 1 record LOW Ckeditor5-html-support 1 record LOW

Records

2 records in Ckeditor5-markdown-gfm · all components

TI-2021-04490 CVE-2021-21391 · GHSA-3rh3-wfr4-76mj

Regular expression Denial of Service in multiple packages

LOW 32

CKEditor 5 provides a WYSIWYG editing solution.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01667 Published 2021-04-29 Fixed in 27.0.0 CWE-400

TI-2022-13215 CVE-2022-31175 · GHSA-42wq-rch8-6f6j

Cross-site scripting caused by the editor instance destroying process in ckeditor5

LOW 28

CKEditor 5 is a JavaScript rich text editor.

CVSS 3.1MEDIUM 5.8 Network No auth User interaction EPSS 0.00883 Published 2022-08-03 Fixed in 35.0.1 CWE-79

Open these records in search →