CKEditor 44.2.0 < 45.2.2, 46.0.0 < 46.0.3 XSS Vulnerability

CKEditor 5 is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CKEditor 5 跨站脚本漏洞

CKEditor 5 is a text editor from the CKEditor Ecosystem open source. A cross-site scripting vulnerability exists in CKEditor 5 versions 46.0.0 to 46.0.2 and 44.2.0 to 45.2.1, which stems from a vulnerability that could be triggered by a specific user action and lead to unauthorized JavaScript cod...

CVE-2025-58064 CKEditor is susceptible to Cross-Site Scripting (XSS) through its clipboard package

CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture. ckeditor5 and ckeditor5-clipboard versions 46.0.0 through 46.0.2 and 44.2.0 through 45.2.1 contain a Cross-Site Scripting XSS vulnerability. Ability to exploit could be triggered by a specific user action leading to...