Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 18
Reset filtersCode Snippet GeSHi plugin in CKEditor 4 has reflected cross-site scripting (XSS) vulnerability
CKEditor cross-site scripting vulnerability in AJAX sample
CKEditor4 Cross-site Scripting vulnerability in samples with enabled the preview feature
CKEditor4 Cross-site Scripting vulnerability caused by incorrect CDATA detection
ckeditor-wordcount-plugin vulnerable to Cross-site Scripting in Source Mode of Editor
CKEditor 4 ReDoS Vulnerability
Improper Neutralization of Input During Web Page Generation in CKEditor4
Drupal core - SA-CORE-2022-005
HTML comments vulnerability allowing to execute JavaScript code
Advanced Content Filter (ACF) vulnerability allowing to execute JavaScript code using malformed HTML
Inclusion of Functionality from Untrusted Control Sphere in CKEditor 4
Fake objects feature vulnerability allowing to execute JavaScript code using malformed HTML.
Clipboard feature vulnerability allowing to inject arbitrary HTML into the editor using paste functionality
Widget feature vulnerability allowing to execute JavaScript code using undo functionality
Drupal core - SA-CORE-2021-003
CKEditor 4.0 vulnerability in the HTML Data Processor
Enhanced Image plugin for CKEditor is vulnerable to Cross-site scripting (XSS)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.