Media
CVE-2024-43411
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 18
Restablecer filtros
Media
CVE-2024-43407
Code Snippet GeSHi plugin in CKEditor 4 has reflected cross-site scripting (XSS) vulnerability
Media
CVE-2023-4771
CKEditor cross-site scripting vulnerability in AJAX sample
Media
CVE-2024-24816
CKEditor4 Cross-site Scripting vulnerability in samples with enabled the preview feature
Media
CVE-2024-24815
CKEditor4 Cross-site Scripting vulnerability caused by incorrect CDATA detection
Media
CVE-2023-37905
ckeditor-wordcount-plugin vulnerable to Cross-site Scripting in Source Mode of Editor
Media
CVE-2021-26271
CKEditor 4 ReDoS Vulnerability
Media
CVE-2020-27193
Improper Neutralization of Input During Web Page Generation in CKEditor4
Media
CVE-2022-24728
Drupal core - SA-CORE-2022-005
Alta
CVE-2021-41165
HTML comments vulnerability allowing to execute JavaScript code
Alta
CVE-2021-41164
Advanced Content Filter (ACF) vulnerability allowing to execute JavaScript code using malformed HTML
Media
CVE-2021-26272
Inclusion of Functionality from Untrusted Control Sphere in CKEditor 4
Alta
CVE-2021-37695
Fake objects feature vulnerability allowing to execute JavaScript code using malformed HTML.
Media
CVE-2021-32809
Clipboard feature vulnerability allowing to inject arbitrary HTML into the editor using paste functionality
Alta
CVE-2021-32808
Widget feature vulnerability allowing to execute JavaScript code using undo functionality
Media
CVE-2021-33829
Drupal core - SA-CORE-2021-003
Media
CVE-2020-9281
CKEditor 4.0 vulnerability in the HTML Data Processor
Media
CVE-2018-9861
Enhanced Image plugin for CKEditor is vulnerable to Cross-site scripting (XSS)
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.