VendorsCKEditorckeditor5all versions
Vulnerabilities

CKEditor ckeditor5

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2021-21254
Regular expression Denial of Service in Markdown plugin
Published 2021-01-29 · Modified
6.5EPSS 0.018
CVE-2026-28343
CKEditor: Cross-site scripting (XSS) in the HTML Support package
Published 2026-03-05 · Modified
6.4EPSS 0.003
CVE-2024-45613
CKEditor 5 has Cross-site Scripting vulnerability in the clipboard package
Published 2024-09-25 · Modified
6.1EPSS 0.005
CVE-2025-61261
A reflected cross-site scripting (XSS) vulnerability in CKeditor v46.1.0 & Angular v18.0.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload.
Published 2025-11-07 · Analyzed
5.4EPSS 0.003