npm/ckeditor4

HTML comments vulnerability allowing to execute JavaScript code

Modified: 7/8/2026

Code Snippet GeSHi plugin in CKEditor 4 has reflected cross-site scripting (XSS) vulnerability

Modified: 2/18/2025

CKEditor4 Cross-site Scripting vulnerability caused by incorrect CDATA detection

Modified: 9/10/2026

ckeditor4 vulnerable to cross-site scripting

Modified: 12/10/2025

Cross-site Scripting in CKEditor4

Modified: 12/10/2025

Improper Neutralization of Input During Web Page Generation in CKEditor4

Modified: 11/8/2023

Widget feature vulnerability allowing to execute JavaScript code using undo functionality

Modified: 7/8/2026

CKEditor4 low-risk cross-site scripting (XSS) vulnerability linked to potential domain takeover

Modified: 11/18/2024

Clipboard feature vulnerability allowing to inject arbitrary HTML into the editor using paste functionality

Modified: 7/8/2026

Fake objects feature vulnerability allowing to execute JavaScript code using malformed HTML.

Modified: 7/8/2026

CKEditor4 Cross-site Scripting vulnerability in samples with enabled the preview feature

Modified: 9/10/2026

Advanced Content Filter (ACF) vulnerability allowing to execute JavaScript code using malformed HTML

Modified: 7/8/2026

CKEditor 4.0 vulnerability in the HTML Data Processor

Modified: 12/6/2023

CKEditor cross-site scripting vulnerability in AJAX sample

Modified: 2/7/2024

Inclusion of Functionality from Untrusted Control Sphere in CKEditor 4

Modified: 11/8/2023