CVE-2023-46694

CVE-2023-46694 Discovered by: Federico Zambito with Innovery Summary Vtenext 21.02 allows an authenticated attacker to upload arbitrary files, resulting in remote code execution. This flaw exists due to the application's failure to enforce proper authentication controls when accessing the Ckedito...

CVE-2024-24816

CVE-2024-24816 CKEditor 4 XSS This issue was caused by a lack of sanitization of the data passed to "preview" feature. This problem has been fixed in CKEditor 4 at version 4.24.0-lts. Affected versions 4.24.0-lts Advisory Update CKEditor 4 to version 4.24.0-lts or newer...

CVE-2025-64095---DNN-Unauthenticated-arbitrary-file-upload

CVE-2025-64095---DNN 未认证任意文件上传 DNN 访问控制不足的 POC - 图片上传允许覆盖站点内容 我是个简单的人，看到 cvss:10/10 我就冲了 xD 我看到了这个新的 CVE CVE-2025-64095，DNN 访问控制不足 - 图片上传允许覆盖站点内容 默认的 HTML 编辑器提供程序允许未认证的文件上传，并且图片可以覆盖现有文件。 描述 未认证用户可以上传并替换现有文件，从而允许篡改网站，并与其他问题结合，注入 XSS 载荷。 https://nvd.nist.gov/vuln/detail/CVE-2025-64095 基础评分：10.0 严重...

CVE-2023-4771

CKEditor AJAX 示例中的跨站脚本漏洞 CVE-2023-4771 PoC CKEditor 4 AJAX 示例中的跨站脚本（XSS）漏洞 本文档介绍如何使用 CKEditor 利用此 XSS 漏洞（CVE-2023-4771）。 请务必极其谨慎地按以下步骤操作： 先决条件 • 拥有对 CKEditor 实例的访问权限。 文件：ckeditor/samples/old/ajax.html。 利用 XSS 漏洞的步骤： 访问 CKEditor 示例页面 打开你常用的浏览器，访问此 URL：/ckeditor/samples/old/ajax.html。该 URL 应指向被测 We...

Drupal 7 CKEditor XSS

CKEditor 4.14.0 through 4.16.x before 4.16.1 contains a reflected cross-site scripting caused by mishandling in comments, letting remote attackers inject executable JavaScript code, exploit requires victim to view malicious content. id: CVE-2021-33829 info: name: Drupal 7 CKEditor XSS author:...

CVE-2018-15961

CVE-2018-15961 - Adobe ColdFusion 2018 RCE 该仓库包含我为 Adobe ColdFusion 2018 中 RCE 漏洞编写的利用代码。 漏洞利用说明 该利用程序向 /cfscripts/scripts/ajax/ckeditor/plugins/filemanager/upload.cfm 发送一个包含 JSP 反弹 Shell 的 POST 请求。如果成功，则会将 Shell 上传至...

Drupal 10.6.x < 10.6.17 / 11.3.x < 11.3.17 / 11.4.x < 11.4.7 Drupal Vulnerability (SA-CORE-2026-013)

According to its self-reported version, the instance of Drupal running on the remote web server is 10.6.x prior to 10.6.17, 11.3.x prior to 11.3.17, or 11.4.x prior to 11.4.7. It is, therefore, affected by a vulnerability. - The Drupal project uses the CKEditor library for WYSIWYG editing. CKEdit...

CVE-2018-15961

CVE-2018-15961 - Adobe ColdFusion RCE Este repositorio contiene mi código de exploit para la vulnerabilidad RCE en Adobe ColdFusion 2021. Descripción del Exploit El exploit envía una solicitud POST que contiene un reverse shell JSP a /cfscripts/scripts/ajax/ckeditor/plugins/filemanager/upload.cfm...

CVE-2024-37888

CVE-2024-37888 このリポジトリは、自身が発見し報告したCVE-2024-37888の脆弱性の詳細とエクスプロイトを文書化しています。 Metrics CWE-79: ウェブページ生成時の入力の中和の不備（クロスサイトスクリプティング） CVSS: 6.1 中 脆弱性の概要 この Proof of Concept POC は、私が最近発見したOpen LinkプラグインのXSS脆弱性の悪用を示しています。このプラグインが有効になると、CKEditor...

CVE-2018-15961

CVE-2018-15961 Adobe ColdFusion中的无限制文件上传 root@kitploit: POST /cfscripts/scripts/ajax/ckeditor/plugins/filemanager/upload.cfm HTTP/1.1 Host: coldfusion:port User-Agent: Mozilla/5.0 Windows NT 10.0; WOW64 AppleWebKit/537.36 KHTML, like Gecko Chrome/62.0.3202.9 Safari/537.36 Content-Type:...

CVE-2026-78741

Silverpeas Core =6.4.6 is vulnerable to Cross Site Scripting XSS in the wysiwyg-CKEditor image upload feature...

CVE-2026-78741

Silverpeas Core =6.4.6 is vulnerable to Cross Site Scripting XSS in the wysiwyg-CKEditor image upload feature...

EUVD-2026-74260

Silverpeas Core =6.4.6 is vulnerable to Cross Site Scripting XSS in the wysiwyg-CKEditor image upload feature...

CVE-2026-78741

Silverpeas Core versions up to 6.4.6 are affected by a Cross-Site Scripting (XSS) vulnerability in the wysiwyg-CKEditor image upload feature. The flaw allows an unauthenticated remote attacker, with user interaction, to inject malicious scripts via the image upload mechanism, resulting in a chang...

Malicious code in @onereach/ckeditor5-build-classic (npm)

npm/@onereach/ckeditor5-build-classic is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized a...

CLSA-2026-1782262731 TuxCare security update for ckeditor (1 CVE)

TuxCare rebuilt ckeditor to address 1 CVE. Fixed in 4.5.11-tuxcare.1...

CLSA-2026-1782349134 TuxCare security update for ckeditor4 (3 CVEs)

TuxCare rebuilt ckeditor4 to address 3 CVEs. Fixed in 4.17.1-tuxcare.1...

@ckeditor/ckeditor-cloud-services-collaboration (>=23.0.0, <=29.0.0), @ckeditor/ckeditor5-real-time-collaboration (>=29.1.0, <=33.0.0) +2 more potentially affected by CVE-2026-69185 via socket.io-parser (3.4.1)

socket.io-parser NPM version 3.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on socket.io-parser and may be impacted: - @ckeditor/ckeditor-cloud-services-collaboration =23.0.0, =29.1.0, =29.0.0, =1.5.3, =2.1.0 Source cves: CVE-2026-69185 Source...

@ckeditor/ckeditor-cloud-services-collaboration (>=23.0.0, <=29.0.0), @ckeditor/ckeditor5-real-time-collaboration (>=29.1.0, <=33.0.0) +2 more potentially affected by CVE-2026-69185 via socket.io-parser (3.4.1)

socket.io-parser NPM version 3.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on socket.io-parser and may be impacted: - @ckeditor/ckeditor-cloud-services-collaboration =23.0.0, =29.1.0, =29.0.0, =1.5.3, =2.1.0 Source cves: CVE-2026-69185 Source...

CVE-2026-58451

Horde IMP before 7.0.1 contains a path traversal vulnerability in lib/Compose.php that allows authenticated attackers to read arbitrary files from the server filesystem by embedding traversal sequences after a CKEditor path prefix in img src URLs. Attackers can bypass the stripos prefix validatio...