ckeditor ckeditor

Name: ckeditor ckeditor
Brand: ckeditor

productUS

cpe:2.3:a:ckeditor:ckeditor:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

1critical2high21medium0low

updated 2026-10-27

vulnerabilities (24)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2022-48110US	medium6.1	2.10% (82nd)	Exploit	no fix	2023-02-13	= 35.4.0
CVE-2024-24816US	medium6.1	1.65% (76th)	Exploit	4.24.0	2024-02-07	4.0 → 4.24.0
CVE-2023-31541US	critical9.8	1.43% (73rd)	Exploit	no fix	2023-06-13	= 1.2.3
CVE-2020-9281US	medium6.1	4.31% (91st)	—	4.14	2020-03-07	4.0 → 4.14
CVE-2021-33829US	medium6.1	3.19% (88th)	—	4.16.1	2021-06-09	4.14.0 → 4.16.1
CVE-2022-24729US	high7.5	2.49% (85th)	—	4.18.0	2022-03-16	4.0 → 4.18.0
CVE-2021-26272US	medium6.5	2.35% (84th)	—	4.16	2021-01-26	4.0 → 4.16
CVE-2020-27193US	medium6.1	2.05% (81st)	—	no fix	2020-11-12	= 4.15.0
CVE-2021-26271US	medium6.5	1.99% (81st)	—	4.16	2021-01-26	4.0 → 4.16
CVE-2018-17960US	medium6.1	1.95% (80th)	—	4.11.0	2018-11-14	4.0 → 4.11.0
CVE-2014-5191US	medium4.3	1.83% (79th)	—	no fix	2014-08-07	3 versions
CVE-2011-4972US	high7.5	1.74% (78th)	—	no fix	2019-11-13	= 7.x-1.4
CVE-2021-41165US	medium5.4	1.57% (75th)	—	4.17.0	2021-11-17	< 4.17.0
CVE-2012-2067US	medium6.8	1.53% (75th)	—	no fix	2012-09-05	17 versions
CVE-2012-2066US	medium4.3	1.36% (72nd)	—	no fix	2012-09-05	17 versions
CVE-2021-41164US	medium5.4	1.35% (71st)	—	4.17.0	2021-11-17	4.0 → 4.17.0
CVE-2021-37695US	medium5.4	1.32% (71st)	—	4.16.2	2021-08-13	< 4.16.2
CVE-2020-9440US	medium6.1	1.31% (70th)	—	no fix	2020-03-10	= 4.0
CVE-2022-24728US	medium5.4	1.20% (68th)	—	4.18.0	2022-03-16	4.0 → 4.18.0
CVE-2021-32808US	medium5.4	1.19% (68th)	—	4.16.2	2021-08-12	4.13.0 → 4.16.2
CVE-2021-32809US	medium5.4	1.19% (68th)	—	4.16.2	2021-08-12	4.5.2 → 4.16.2
CVE-2023-28439US	medium6.1	0.73% (54th)	—	4.21.0	2023-03-22	4.0 → 4.21.0
CVE-2024-24815US	medium6.1	0.71% (53rd)	—	4.24.0	2024-02-07	4.0 → 4.24.0
CVE-2024-43407US	medium6.1	0.45% (39th)	—	4.25.0	2024-08-21	4.0 → 4.25.0

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')19 CVEs
CWE-1333Inefficient Regular Expression Complexity2 CVEs
CWE-400Uncontrolled Resource Consumption2 CVEs
CWE-829Inclusion of Functionality from Untrusted Control Sphere2 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-434Unrestricted Upload of File with Dangerous Type1 CVEs
CWE-913Improper Control of Dynamically-Managed Code Resources1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE24 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan