Cksource

    Dashboard / Vendors

    Products: 4
    Vulnerabilities: 8
    Known Exploited: 0
    0
    Critical Level Threats
    1
    High Level Threats
    7
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2025-13980

    CKEditor 5 Premium Features - Moderately critical - Access bypass - SA-CONTRIB-2025-118

    Last Modified: Feb 12, 2026
    Published: Jan 28, 2026

    CVE-2016-20023

    In CKSource CKFinder before 2.5.0.1 for ASP.NET, authenticated users could download any file from the server if the correct path to a file was provided.

    Last Modified: Dec 17, 2025
    Published: Dec 05, 2025

    CVE-2025-63830

    CKFinder 1.4.3 is vulnerable to Cross Site Scripting (XSS) in the File Upload function. An attacker can upload a crafted SVG containing active content.

    Last Modified: Nov 19, 2025
    Published: Nov 14, 2025

    CVE-2024-13245

    CKEditor 4 LTS - WYSIWYG HTML editor - Moderately critical - Cross Site Scripting - SA-CONTRIB-2024-009

    Last Modified: Jul 07, 2025
    Published: Jan 09, 2025

    CVE-2023-4771

    Cross-Site Scripting vulnerability in CKSource CKEditor

    Last Modified: Nov 21, 2024
    Published: Nov 16, 2023
    Items Per Page