[MEDIUM] Code Snippet GeSHi plugin in CKEditor 4 has reflected cross-site scripting (XSS) vulnerability

PKSA-sd3x-9jwt-jn4s CVE-2024-43407 GHSA-7r32-vfj5-c2jv

Affected version: <4.25.0

Reported by:
GitHub

[MEDIUM] CKEditor4 Cross-site Scripting vulnerability caused by incorrect CDATA detection

PKSA-4d16-gn5t-2wt7 CVE-2024-24815 GHSA-fq6h-4g8v-qqvm

Affected version: <4.24.0

Reported by:
GitHub

[MEDIUM] The Preview plugin in CKEditor allows Cross-site scripting (XSS)

PKSA-9nwm-d5bx-39tf CVE-2014-5191 GHSA-v27h-j97p-wqmx

Affected version: <4.4.3

Reported by:
GitHub

[HIGH] HTML comments vulnerability allowing to execute JavaScript code

PKSA-hw62-11cy-3pk5 CVE-2021-41165 GHSA-7h26-63m7-qhf2

Affected version: <4.17.0

Reported by:
GitHub