Every CVE whose affected-product data names Ckeditor Ckeditor5, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (4)
CVE-2021-21254 — CVSS 6.5 (medium): CKEditor 5 is an open source rich text editor framework with a modular architecture. The CKEditor 5 Markdown plugin (@ckeditor/ckeditor5-mar…
CVE-2026-28343 — CVSS 6.4 (medium): CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture. Starting in version 29.0.0 and prior to version 47.6.0, a…
CVE-2024-45613 — CVSS 6.1 (medium): CKEditor 5 is a JavaScript rich-text editor. Starting in version 40.0.0 and prior to version 43.1.1, a Cross-Site Scripting (XSS)…
CVE-2025-61261 — CVSS 5.4 (medium): A reflected cross-site scripting (XSS) vulnerability in CKeditor v46.1.0 & Angular v18.0.0 allows attackers to execute arbitrary code in…