[MEDIUM] CKEditor4 Cross-site Scripting vulnerability caused by incorrect CDATA detection

PKSA-4d16-gn5t-2wt7 CVE-2024-24815 GHSA-fq6h-4g8v-qqvm

Affected version: <4.24.0

Reported by:
GitHub

[HIGH] HTML comments vulnerability allowing to execute JavaScript code

PKSA-hw62-11cy-3pk5 CVE-2021-41165 GHSA-7h26-63m7-qhf2

Affected version: <4.17.0

Reported by:
GitHub