ckeditor/ckeditor Security Advisories for 4.6.0 (2)
-
[MEDIUM] CKEditor4 Cross-site Scripting vulnerability caused by incorrect CDATA detection
PKSA-4d16-gn5t-2wt7 CVE-2024-24815 GHSA-fq6h-4g8v-qqvm
Affected version: <4.24.0
Reported by:
GitHub -
[HIGH] HTML comments vulnerability allowing to execute JavaScript code
PKSA-hw62-11cy-3pk5 CVE-2021-41165 GHSA-7h26-63m7-qhf2
Affected version: <4.17.0
Reported by:
GitHub