İçeriğe atla
Noroxi

ckeditor kayıtları

ckeditor üreticisine ait 34 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
2
Düzeltme kaydı olan
%76,5
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 18
  2. 19
  3. 20
  4. 21
  5. 22
  6. 23
  7. 24
  8. 25
  9. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

34 kayıt
  • CVE-2023-31541
    39İzleyin

    A unrestricted file upload vulnerability was discovered in the ‘Browse and upload images’ feature of the CKEditor v1.2.3 plugin for Redmine,

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    ckeditor · ckeditor13 Haz 2023

  • CVE-2022-24729
    31İzleyin

    Regular expression Denial of Service in dialog plugin

    YüksekCVSS 7,5İstismar yokEPSS %2

    ckeditor · ckeditor16 Mar 2022

  • CVE-2011-4972
    31İzleyin

    hook_file_download in the CKEditor module 7.x-1.4 for Drupal does not properly restrict access to private files, which allows remote attacke

    YüksekCVSS 7,5İstismar yokEPSS %2

    ckeditor · ckeditor13 Kas 2019

  • CVE-2021-26272
    27İzleyin

    It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted URL-like text into the

    OrtaCVSS 6,5İstismar yokEPSS %2

    ckeditor · ckeditor26 Oca 2021

  • CVE-2021-26271
    27İzleyin

    It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted text into the Styles in

    OrtaCVSS 6,5İstismar yokEPSS %2

    ckeditor · ckeditor26 Oca 2021

  • CVE-2021-21254
    27İzleyin

    Regular expression Denial of Service in Markdown plugin

    OrtaCVSS 6,5İstismar yokEPSS %2

    ckeditor · ckeditor529 Oca 2021

  • CVE-2021-21391
    27İzleyin

    Regular expression Denial of Service in multiple packages

    OrtaCVSS 6,5İstismar yokEPSS %2

    ckeditor · ckeditor5-engine28 Nis 2021

  • CVE-2012-2067
    27İzleyin

    Unspecified vulnerability in the CKeditor module 6.x-2.x before 6.x-2.3 and the CKEditor module 6.x-1.x before 6.x-1.9 and 7.x-1.x before 7.

    OrtaCVSS 6,8İstismar yokEPSS %2

    ckeditor · fckeditor4 Eyl 2012

  • CVE-2020-9281
    25İzleyin

    A cross-site scripting (XSS) vulnerability in the HTML Data Processor for CKEditor 4.0 before 4.14 allows remote attackers to inject arbitra

    OrtaCVSS 6,1İstismar yokEPSS %4

    ckeditor · ckeditor6 Mar 2020

  • CVE-2021-33829
    25İzleyin

    A cross-site scripting (XSS) vulnerability in the HTML Data Processor in CKEditor 4 4.14.0 through 4.16.x before 4.16.1 allows remote attack

    OrtaCVSS 6,1Kavram kanıtıEPSS %3

    ckeditor · ckeditor9 Haz 2021

  • CVE-2022-48110
    25İzleyin

    CKSource CKEditor 5 35.4.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Full Featured CKEditor5 widget.

    OrtaCVSS 6,1Kavram kanıtıEPSS %2

    ckeditor · ckeditor13 Şub 2023

  • CVE-2020-27193
    25İzleyin

    A cross-site scripting (XSS) vulnerability in the Color Dialog plugin for CKEditor 4.15.0 allows remote attackers to run arbitrary web scrip

    OrtaCVSS 6,1İstismar yokEPSS %2

    ckeditor · ckeditor12 Kas 2020

  • CVE-2018-17960
    25İzleyin

    CKEditor 4.x before 4.11.0 allows user-assisted XSS involving a source-mode paste.

    OrtaCVSS 6,1İstismar yokEPSS %2

    ckeditor · ckeditor14 Kas 2018

  • CVE-2018-9861
    25İzleyin

    Cross-site scripting (XSS) vulnerability in the Enhanced Image (aka image2) plugin for CKEditor (in versions 4.5.10 through 4.9.1; fixed in

    OrtaCVSS 6,1İstismar yokEPSS %2

    ckeditor · enhanced image19 Nis 2018

  • CVE-2024-24816
    24İzleyin

    Cross-site scripting (XSS) vulnerability in samples with enabled the preview feature

    OrtaCVSS 6,1Kavram kanıtıEPSS %2

    ckeditor · ckeditor7 Şub 2024

  • CVE-2020-9440
    24İzleyin

    A cross-site scripting (XSS) vulnerability in the WSC plugin through 5.5.7.5 for CKEditor 4 allows remote attackers to run arbitrary web scr

    OrtaCVSS 6,1İstismar yokEPSS %1

    ckeditor · ckeditor10 Mar 2020

  • CVE-2018-11093
    24İzleyin

    Cross-site scripting (XSS) vulnerability in the Link package for CKEditor 5 before 10.0.1 allows remote attackers to inject arbitrary web sc

    OrtaCVSS 6,1İstismar yokEPSS %1

    ckeditor · ckeditor 5-link22 May 2018

  • CVE-2023-28439
    24İzleyin

    ckeditor4 plugins vulnerable to cross-site scripting caused by the editor instance destroying process

    OrtaCVSS 6,1İstismar yokEPSS %1

    ckeditor · ckeditor22 Mar 2023

  • CVE-2024-24815
    24İzleyin

    CKEditor4 Cross-site scripting (XSS) vulnerability caused by incorrect CDATA detection

    OrtaCVSS 6,1İstismar yokEPSS %1

    ckeditor · ckeditor7 Şub 2024

  • CVE-2024-43407
    24İzleyin

    Code Snippet GeSHi plugin has reflected cross-site scripting (XSS) vulnerability

    OrtaCVSS 6,1İstismar yokEPSS %0

    ckeditor · ckeditor21 Ağu 2024

  • CVE-2026-28343
    24İzleyin

    CKEditor: Cross-site scripting (XSS) in the HTML Support package

    OrtaCVSS 6,1İstismar yokEPSS %0

    ckeditor · ckeditor55 Mar 2026

  • CVE-2021-41165
    21İzleyin

    HTML comments vulnerability allowing to execute JavaScript code

    OrtaCVSS 5,4İstismar yokEPSS %2

    ckeditor · ckeditor17 Kas 2021

  • CVE-2021-41164
    21İzleyin

    Advanced Content Filter (ACF) vulnerability allowing to execute JavaScript code using malformed HTML

    OrtaCVSS 5,4İstismar yokEPSS %1

    ckeditor · ckeditor17 Kas 2021

  • CVE-2021-37695
    21İzleyin

    Execution of JavaScript code using malformed HTML in ckeditor

    OrtaCVSS 5,4İstismar yokEPSS %1

    ckeditor · ckeditor12 Ağu 2021

  • CVE-2022-24728
    21İzleyin

    Cross-site Scripting in CKEditor4

    OrtaCVSS 5,4İstismar yokEPSS %1

    ckeditor · ckeditor16 Mar 2022