[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fieu9AzkjqOXG8EQJX4fZl_i5DM0H5jfKGjAnAcvjqZ8":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":86,"kevVulnerabilities":145,"topProductsByCves":146,"seoMetadata":157,"meta":166},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":85},5445,"ckeditor",16,32,0,602,"2024-09-25","c",[16,21,27,32,37,43,46,49,53,58,62,66,70,75,78,81],{"id":17,"product_name":8,"version_count":18,"cve_count":19,"kev_count":11,"last_cve_update":20},27391,106,24,"2024-08-21",{"id":22,"product_name":23,"version_count":24,"cve_count":25,"kev_count":11,"last_cve_update":26},27406,"fckeditor",54,4,"2014-06-11",{"id":28,"product_name":29,"version_count":30,"cve_count":31,"kev_count":11,"last_cve_update":13},27393,"ckeditor5",121,2,{"id":33,"product_name":34,"version_count":35,"cve_count":31,"kev_count":11,"last_cve_update":36},27401,"ckeditor5-markdown-gfm",34,"2022-08-03",{"id":38,"product_name":39,"version_count":40,"cve_count":41,"kev_count":11,"last_cve_update":42},27395,"ckeditor5-font",27,1,"2021-04-29",{"id":44,"product_name":45,"version_count":11,"cve_count":41,"kev_count":11,"last_cve_update":36},27396,"ckeditor5-html-embed",{"id":47,"product_name":48,"version_count":11,"cve_count":41,"kev_count":11,"last_cve_update":36},27397,"ckeditor5-html-support",{"id":50,"product_name":51,"version_count":52,"cve_count":41,"kev_count":11,"last_cve_update":42},27398,"ckeditor5-image",33,{"id":54,"product_name":55,"version_count":56,"cve_count":41,"kev_count":11,"last_cve_update":57},27399,"ckeditor_5-link",22,"2018-05-22",{"id":59,"product_name":60,"version_count":61,"cve_count":41,"kev_count":11,"last_cve_update":42},27402,"ckeditor5-media-embed",25,{"id":63,"product_name":64,"version_count":65,"cve_count":41,"kev_count":11,"last_cve_update":42},27403,"ckeditor5-paste-from-office",21,{"id":67,"product_name":68,"version_count":69,"cve_count":41,"kev_count":11,"last_cve_update":42},27404,"ckeditor5-widget",31,{"id":71,"product_name":72,"version_count":73,"cve_count":41,"kev_count":11,"last_cve_update":74},27405,"enhanced_image",58,"2018-04-19",{"id":76,"product_name":77,"version_count":35,"cve_count":41,"kev_count":11,"last_cve_update":42},27400,"ckeditor5-list",{"id":79,"product_name":80,"version_count":35,"cve_count":41,"kev_count":11,"last_cve_update":42},27394,"ckeditor5-engine",{"id":82,"product_name":83,"version_count":31,"cve_count":11,"kev_count":11,"last_cve_update":84},27392,"ckeditor_5",null,"Ckeditor is a technology vendor with 16 tracked products and 32 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[87,96,103,108,112,119,125,130,135,139],{"cveId":88,"description":89,"publishedDate":90,"cvssScore":91,"cvssVersion":92,"severity":93,"isKev":94,"epssScore":95},"CVE-2020-9281","A cross-site scripting (XSS) vulnerability in the HTML Data Processor for CKEditor 4.0 before 4.14 allows remote attackers to inject arbitrary web script through a crafted \"protected\" comment (with the cke_protected syntax).","2020-03-07",6.1,"v3.1","Medium",false,0.04308,{"cveId":97,"description":98,"publishedDate":99,"cvssScore":100,"cvssVersion":101,"severity":93,"isKev":94,"epssScore":102},"CVE-2012-4000","Cross-site scripting (XSS) vulnerability in the print_textinputs_var function in editor\u002Fdialog\u002Ffck_spellerpages\u002Fspellerpages\u002Fserver-scripts\u002Fspellchecker.php in FCKeditor 2.6.7 and earlier allows remote attackers to inject arbitrary web script or HTML via textinputs array parameters.","2012-07-12",4.3,"v2",0.04251,{"cveId":104,"description":105,"publishedDate":106,"cvssScore":91,"cvssVersion":92,"severity":93,"isKev":94,"epssScore":107},"CVE-2021-33829","A cross-site scripting (XSS) vulnerability in the HTML Data Processor in CKEditor 4 4.14.0 through 4.16.x before 4.16.1 allows remote attackers to inject executable JavaScript code through a crafted comment because --!> is mishandled.","2021-06-09",0.03189,{"cveId":109,"description":110,"publishedDate":26,"cvssScore":100,"cvssVersion":101,"severity":93,"isKev":94,"epssScore":111},"CVE-2014-4037","Cross-site scripting (XSS) vulnerability in editor\u002Fdialog\u002Ffck_spellerpages\u002Fspellerpages\u002Fserver-scripts\u002Fspellchecker.php in FCKeditor before 2.6.11 and earlier allows remote attackers to inject arbitrary web script or HTML via an array key in the textinputs[] parameter, a different issue than CVE-2012-4000.",0.0251,{"cveId":113,"description":114,"publishedDate":115,"cvssScore":116,"cvssVersion":92,"severity":117,"isKev":94,"epssScore":118},"CVE-2022-24729","CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. CKEditor4 prior to version 4.18.0 contains a vulnerability in the `dialog` plugin. The vulnerability allows abuse of a dialog input validator regular expression, which can cause a significant performance drop resulting in a browser tab freeze. A patch is available in version 4.18.0. There are currently no known workarounds.","2022-03-16",7.5,"High",0.02487,{"cveId":120,"description":121,"publishedDate":122,"cvssScore":123,"cvssVersion":92,"severity":93,"isKev":94,"epssScore":124},"CVE-2021-26272","It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted URL-like text into the editor, and then press Enter or Space (in the Autolink plugin).","2021-01-26",6.5,0.02303,{"cveId":126,"description":127,"publishedDate":128,"cvssScore":91,"cvssVersion":92,"severity":93,"isKev":94,"epssScore":129},"CVE-2022-48110","CKSource CKEditor 5 35.4.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Full Featured CKEditor5 widget. NOTE: the vendor's position is that this is not a vulnerability. The CKEditor 5 documentation discusses that it is the responsibility of an integrator (who is adding CKEditor 5 functionality to a website) to choose the correct security settings for their use case. Also, safe default values are established (e.g., config.htmlEmbed.showPreviews is false).","2023-02-13",0.02097,{"cveId":131,"description":132,"publishedDate":133,"cvssScore":91,"cvssVersion":92,"severity":93,"isKev":94,"epssScore":134},"CVE-2020-27193","A cross-site scripting (XSS) vulnerability in the Color Dialog plugin for CKEditor 4.15.0 allows remote attackers to run arbitrary web script after persuading a user to copy and paste crafted HTML code into one of editor inputs.","2020-11-12",0.02033,{"cveId":136,"description":137,"publishedDate":122,"cvssScore":123,"cvssVersion":92,"severity":93,"isKev":94,"epssScore":138},"CVE-2021-26271","It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted text into the Styles input of specific dialogs (in the Advanced Tab for Dialogs plugin).",0.0197,{"cveId":140,"description":141,"publishedDate":142,"cvssScore":91,"cvssVersion":143,"severity":93,"isKev":94,"epssScore":144},"CVE-2018-17960","CKEditor 4.x before 4.11.0 allows user-assisted XSS involving a source-mode paste.","2018-11-14","v3.0",0.01946,[],[147,148,149,150,151,152,153,154,155,156],{"id":17,"product_name":8,"version_count":18,"cve_count":19,"kev_count":11,"last_cve_update":20},{"id":22,"product_name":23,"version_count":24,"cve_count":25,"kev_count":11,"last_cve_update":26},{"id":28,"product_name":29,"version_count":30,"cve_count":31,"kev_count":11,"last_cve_update":13},{"id":33,"product_name":34,"version_count":35,"cve_count":31,"kev_count":11,"last_cve_update":36},{"id":38,"product_name":39,"version_count":40,"cve_count":41,"kev_count":11,"last_cve_update":42},{"id":44,"product_name":45,"version_count":11,"cve_count":41,"kev_count":11,"last_cve_update":36},{"id":47,"product_name":48,"version_count":11,"cve_count":41,"kev_count":11,"last_cve_update":36},{"id":50,"product_name":51,"version_count":52,"cve_count":41,"kev_count":11,"last_cve_update":42},{"id":54,"product_name":55,"version_count":56,"cve_count":41,"kev_count":11,"last_cve_update":57},{"id":59,"product_name":60,"version_count":61,"cve_count":41,"kev_count":11,"last_cve_update":42},{"title":158,"metaDescription":159,"keywords":160,"structuredData":161},"Ckeditor - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Ckeditor covering 16 products with 32 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Ckeditor vulnerabilities, Ckeditor security, Ckeditor CVE, Ckeditor threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":162,"@type":163,"name":164,"description":159,"url":165},"https:\u002F\u002Fschema.org","Organization","Ckeditor","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fckeditor",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":167,"apiVersion":168},"2026-10-17T19:29:47.364Z","3.0"]