What’s Vulnerable › Products

xwiki-contrib application-ckeditor vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your xwiki-contrib application-ckeditor version is affected

Latest xwiki-contrib application-ckeditor vulnerabilities

• CVE-2023-36477 — Persistent Cross-site Scripting (XSS) through CKEditor Configuration pages in XWiki Platform (CVSS 5.4)
• CVE-2023-22457 — org.xwiki.contrib:application-ckeditor-ui vulnerable to Remote Code Execution via Cross-Site Request Forgery (CVSS 8.8)