CVE-2023-46694

CVE-2023-46694 Discovered by: Federico Zambito with Innovery Summary Vtenext 21.02 allows an authenticated attacker to upload arbitrary files, resulting in remote code execution. This flaw exists due to the application's failure to enforce proper authentication controls when accessing the Ckedito...

CVE-2023-4771

CKEditor cross-site scripting vulnerability in AJAX sample CVE-2023-4771 PoC CKEditor 4 Cross-site scripting XSS vulnerability in AJAX sample This document describes how to perform an XSS vulnerability CVE-2023-4771 using CKEditor. Make sure the following is done with great caution to follow...

CVE-2024-24816

CVE-2024-24816 CKEditor 4 XSS This issue was caused by a lack of sanitization of the data passed to "preview" feature. This problem has been fixed in CKEditor 4 at version 4.24.0-lts. Affected versions 4.24.0-lts Advisory Update CKEditor 4 to version 4.24.0-lts or newer...

CVE-2025-64095---DNN-Unauthenticated-arbitrary-file-upload

CVE-2025-64095---DNN 未认证任意文件上传 DNN 访问控制不足的 POC - 图片上传允许覆盖站点内容 我是个简单的人，看到 cvss:10/10 我就冲了 xD 我看到了这个新的 CVE CVE-2025-64095，DNN 访问控制不足 - 图片上传允许覆盖站点内容 默认的 HTML 编辑器提供程序允许未认证的文件上传，并且图片可以覆盖现有文件。 描述 未认证用户可以上传并替换现有文件，从而允许篡改网站，并与其他问题结合，注入 XSS 载荷。 https://nvd.nist.gov/vuln/detail/CVE-2025-64095 基础评分：10.0 严重...

Drupal 7 CKEditor XSS

CKEditor 4.14.0 through 4.16.x before 4.16.1 contains a reflected cross-site scripting caused by mishandling in comments, letting remote attackers inject executable JavaScript code, exploit requires victim to view malicious content. id: CVE-2021-33829 info: name: Drupal 7 CKEditor XSS author:...

CVE-2018-15961

CVE-2018-15961 - Adobe ColdFusion 2018 RCE 该仓库包含我为 Adobe ColdFusion 2018 中 RCE 漏洞编写的利用代码。 漏洞利用说明 该利用程序向 /cfscripts/scripts/ajax/ckeditor/plugins/filemanager/upload.cfm 发送一个包含 JSP 反弹 Shell 的 POST 请求。如果成功，则会将 Shell 上传至...

CVE-2018-15961

CVE-2018-15961 - Adobe ColdFusion RCE This repository contains my exploit code for the RCE vulnerability in Adobe ColdFusion 2021. Exploit Description The exploit sends a POST request containing a JSP reverse shell to /cfscripts/scripts/ajax/ckeditor/plugins/filemanager/upload.cfm. If successfull...

CVE-2024-37888

CVE-2024-37888 本仓库记录了我发现并报告的CVE-2024-37888的漏洞细节及利用方法。 指标 CWE-79: 在网页生成过程中对输入的不当中和（'跨站脚本'） CVSS: 6.1 中危 漏洞概述 此概念验证（POC）演示了我最近在 Open Link 插件中发现的一个 XSS 漏洞的利用，该插件一旦启用，会直接影响 CKEditor 4 的所有版本。该漏洞允许通过编辑器内精心构造的链接执行 JavaScript，而该插件未能对其进行清理。此漏洞仅在安装了 Open Link 插件时才能在文本区域内被利用。Open Link 插件允许我们直接在编辑区域内打开链接。 前提...

CVE-2018-15961

CVE-2018-15961 Adobe ColdFusion中的无限制文件上传 root@kitploit: POST /cfscripts/scripts/ajax/ckeditor/plugins/filemanager/upload.cfm HTTP/1.1 Host: coldfusion:port User-Agent: Mozilla/5.0 Windows NT 10.0; WOW64 AppleWebKit/537.36 KHTML, like Gecko Chrome/62.0.3202.9 Safari/537.36 Content-Type:...

CVE-2026-78741

Silverpeas Core =6.4.6 is vulnerable to Cross Site Scripting XSS in the wysiwyg-CKEditor image upload feature...

EUVD-2026-74260

Silverpeas Core =6.4.6 is vulnerable to Cross Site Scripting XSS in the wysiwyg-CKEditor image upload feature...

CVE-2026-78741

Silverpeas Core =6.4.6 is vulnerable to Cross Site Scripting XSS in the wysiwyg-CKEditor image upload feature...

CVE-2026-78741

Silverpeas Core versions up to 6.4.6 are affected by a Cross-Site Scripting (XSS) vulnerability in the wysiwyg-CKEditor image upload feature. The flaw allows an unauthenticated remote attacker, with user interaction, to inject malicious scripts via the image upload mechanism, resulting in a chang...

Malicious code in @onereach/ckeditor5-build-classic (npm)

npm/@onereach/ckeditor5-build-classic is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized a...

CLSA-2026-1782262731 TuxCare security update for ckeditor (1 CVE)

TuxCare rebuilt ckeditor to address 1 CVE. Fixed in 4.5.11-tuxcare.1...

CLSA-2026-1782349134 TuxCare security update for ckeditor4 (3 CVEs)

TuxCare rebuilt ckeditor4 to address 3 CVEs. Fixed in 4.17.1-tuxcare.1...

@ckeditor/ckeditor-cloud-services-collaboration (>=23.0.0, <=29.0.0), @ckeditor/ckeditor5-real-time-collaboration (>=29.1.0, <=33.0.0) +2 more potentially affected by CVE-2026-69185 via socket.io-parser (3.4.1)

socket.io-parser NPM version 3.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on socket.io-parser and may be impacted: - @ckeditor/ckeditor-cloud-services-collaboration =23.0.0, =29.1.0, =29.0.0, =1.5.3, =2.1.0 Source cves: CVE-2026-69185 Source...

@ckeditor/ckeditor-cloud-services-collaboration (>=23.0.0, <=29.0.0), @ckeditor/ckeditor5-real-time-collaboration (>=29.1.0, <=33.0.0) +2 more potentially affected by CVE-2026-69185 via socket.io-parser (3.4.1)

socket.io-parser NPM version 3.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on socket.io-parser and may be impacted: - @ckeditor/ckeditor-cloud-services-collaboration =23.0.0, =29.1.0, =29.0.0, =1.5.3, =2.1.0 Source cves: CVE-2026-69185 Source...

CVE-2026-58451

Horde IMP before 7.0.1 contains a path traversal vulnerability in lib/Compose.php that allows authenticated attackers to read arbitrary files from the server filesystem by embedding traversal sequences after a CKEditor path prefix in img src URLs. Attackers can bypass the stripos prefix validatio...

DEBIAN-CVE-2026-58451

Horde IMP before 7.0.1 contains a path traversal vulnerability in lib/Compose.php that allows authenticated attackers to read arbitrary files from the server filesystem by embedding traversal sequences after a CKEditor path prefix in img src URLs. Attackers can bypass the stripos prefix validatio...