Read the docs

CKSource

Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

CKSource records in CISA KEV

No CKSource vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ckfinder 4 records MEDIUM Ckeditor 2 records LOW Ckeditor 4 1 record LOW Ckeditor 5 Premium Features 1 record LOW

Records

1 record in Ckeditor 4 · all components

TI-2024-12289 CVE-2024-13245 · GHSA-2gj6-558v-rq2w

CKEditor 4 LTS - WYSIWYG HTML editor - Moderately critical - Cross Site Scripting - SA-CONTRIB-2024-009

Priority LOW 24

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal CKEditor 4 LTS - WYSIWYG HTML editor allows Cross-Site Scripting (XSS).This issue affects CKEditor 4 LTS - WYSI…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00229 Published 2025-01-09 Fixed in 1.0.1 CWE-79
Open these records in search →