[ Vendor · 2 CVEs ]
ckeditor
CVEs affecting ckeditor published in the last 30 days, plus any ckeditor CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-116688 | 27 Oct 2026 | CVSS 8.1 | CKEditor: Cross-site scripting (XSS) in the engine packageCKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture. From 45.0.0 until 47.7.4 and 48.5.1, the engine uses a vulnerable… | Fix |
| CVE-2026-116687 | 27 Oct 2026 | CVSS 3.1 | CKEditor: Cross-site scripting (XSS) in the engine packageCKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture. From 29.0.0 until 47.7.4 and 48.5.1, specially crafted markup can… | Fix |