Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CKEditor4 Cross-site Scripting vulnerability caused by incorrect CDATA detection

🗓️ 07 Feb 2024 17:30:37Reported by GitHub Advisory DatabaseType 
github
 github🔗 github.com👁 173 Views

CKEditor4 HTML parsing vulnerability in CDATA detectio

Related
Detection
Refs
ReporterTitlePublishedViews
Family
IBM Security Bulletins		Security Bulletin: IBM Engineering Lifecycle Management - Jazz Foundation is impacted by vulnerabilities in CKEditor 4.19
29 Aug 202519:15
–ibm
IBM Security Bulletins		Security Bulletin: IBM Engineering Requirements Management DOORS/DWA vulnerabilities addressed in 9.7.2.10
29 Jul 202522:30
–ibm
IBM Security Bulletins		Security Bulletin: IBM Sterling B2B Integrator is affected by multiple vulnerabilities in CKEditor
4 Dec 202415:19
–ibm
Circl		CVE-2024-24815
7 Feb 202417:22
–circl
Tenable Nessus		CKEditor 4.x < 4.24.0-lts Multitple XSS
9 Feb 202400:00
–nessus
Tenable Nessus		IBM Engineering Requirements Management DOORS 9.7.2.9 < 9.7.2.10 Multiple Vulnerabilities (7238992)
18 Jul 202500:00
–nessus
Tenable Nessus		openSUSE 15 Security Update : python-django-ckeditor (openSUSE-SU-2025:0008-1)
8 Jan 202500:00
–nessus
Tenable Nessus		Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 : CKEditor vulnerabilities (USN-7258-1)
6 Feb 202500:00
–nessus
Tenable Nessus		Linux Distros Unpatched Vulnerability : CVE-2024-24815
30 Aug 202500:00
–nessus
Tenable Nessus		CKEditor < 4.24.0-LTS Multiples Cross-Site Scripting
9 Sep 202400:00
–nessus
Rows per page
Vulners
Node
ckeditorckeditorRange<4.24.0composer
OR
ckeditor4Range<4.24.0-ltsnpm

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
06 Mar 2024 15:35Current
6.5Medium risk
Vulners AI Score6.5
CVSS 3.16.1
EPSS0.00169
SSVC
CWE-79
ckeditor4html parsingvulnerabilitycdataadvanced content filteringjavascript codepatchversion 4.24.0-ltssecurity advisorymichal frýbaalef nula
173