Known vulnerabilities in CKEditor 4.3.4 full

Vendor: CKSource
Software: CKEditor
Version: 4.3.4 full
Software CPE: cpe:2.3:a:cksource:ckeditor:*:*:*:*:*:*:*:*
Total vulnerabilities: 15
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 5.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting CKEditor version 4.3.4 full CKEditor 4.3.4 full is affected by 15 vulnerabilities: 2 medium, 13 low Critical High Medium Low

Vulnerabilities (15)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU96371 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43407
CWE-79 Low
No
No
4.25.0 21.08.2024 SB2024082195
SB20241015177
SB20241015178
#VU86224 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-24816
CWE-79 Low
Public exploit available
No
4.24.0 07.02.2024 SB2024020740
SB2024041767
SB20240718122
and 3 more
#VU86223 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-4771
CWE-79 Low
Public exploit available
No
4.24.0 07.02.2024 SB2024020740
SB2024111597
SB2025092610
#VU86222 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-24815
CWE-79 Low
No
No
4.24.0 07.02.2024 SB2024020740
SB2024111597
SB2025020604
and 1 more
#VU78394 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-28439
CWE-79 Low
No
No
4.21.0 19.07.2023 SB2023071950
SB2023071977
SB20230719111
and 13 more
#VU61427 - Incorrect Regular Expression
CVE-2022-24729
CWE-185 Low
No
No
4.18.0 17.03.2022 SB2022031702
SB2022031703
SB2022031704
and 24 more
#VU61426 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-24728
CWE-79 Low
No
No
4.18.0 17.03.2022 SB2022031702
SB2022031703
SB2022031704
and 12 more
#VU58220 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41164
CWE-79 Medium
No
No
4.17.0 18.11.2021 SB2021111801
SB2021111802
SB2021111909
and 6 more
#VU58219 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41165
CWE-79 Medium
No
No
4.17.0 18.11.2021 SB2021111801
SB2021111802
SB2021111909
and 14 more
#VU55859 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-37695
CWE-79 Low
No
No
4.16.2 16.08.2021 SB2021081608
SB2022011822
SB2022020113
and 16 more
#VU55819 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
4.16.2 12.08.2021 SB2021081214
SB2021081215
SB2021081220
#VU55818 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
4.16.2 12.08.2021 SB2021081214
SB2021081215
SB2021081220
#VU55817 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
4.16.2 12.08.2021 SB2021081214
SB2021081215
SB2021081220
#VU53604 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-33829
CWE-79 Low
No
No
4.16.1 27.05.2021 SB2021052701
SB2021052702
SB2021052704
and 8 more
#VU31182 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-17960
CWE-79 Low
No
No
4.11.0 14.11.2018 SB2018111420
SB2021040136
SB2018042442
and 6 more