Ckeditor

    Dashboard / Vendors

    Products: 17
    Vulnerabilities: 38
    Known Exploited: 0
    1
    Critical Level Threats
    5
    High Level Threats
    30
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-28343

    CKEditor: Cross-site scripting (XSS) in the HTML Support package

    Last Modified: Apr 16, 2026
    Published: Mar 05, 2026

    CVE-2025-13980

    CKEditor 5 Premium Features - Moderately critical - Access bypass - SA-CONTRIB-2025-118

    Last Modified: Feb 12, 2026
    Published: Jan 28, 2026

    CVE-2025-63830

    CKFinder 1.4.3 is vulnerable to Cross Site Scripting (XSS) in the File Upload function. An attacker can upload a crafted SVG containing active content.

    Last Modified: Nov 19, 2025
    Published: Nov 14, 2025

    CVE-2025-61261

    A reflected cross-site scripting (XSS) vulnerability in CKeditor v46.1.0 & Angular v18.0.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload.

    Last Modified: Dec 11, 2025
    Published: Nov 07, 2025

    CVE-2025-58064

    CKEditor is susceptible to Cross-Site Scripting (XSS) through its clipboard package

    Last Modified: Apr 15, 2026
    Published: Sep 03, 2025
    Items Per Page