VendorsCKEditorckeditor_5-linkall versions
Vulnerabilities

CKEditor CKEditor 5-link

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

1CVEs
CVE-2018-11093
Cross-site scripting (XSS) vulnerability in the Link package for CKEditor 5 before 10.0.1 allows remote attackers to inject arbitrary web script through a crafted href attribute of a link (A) element.
Published 2018-05-22 · Modified
6.1EPSS 0.010