Search for packages
| purl | pkg:npm/ckeditor4@4.15.1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-yerd-d9uh-cyc6 | Improper Neutralization of Input During Web Page Generation in CKEditor4 A cross-site scripting (XSS) vulnerability in the Color Dialog plugin for CKEditor 4.15.0 allows remote attackers to run arbitrary web script after persuading a user to copy and paste crafted HTML code into one of editor inputs. |
CVE-2020-27193
GHSA-4m44-5j2g-xf64 |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-07-01T14:32:39.438229+00:00 | GHSA Importer | Fixing | VCID-yerd-d9uh-cyc6 | https://github.com/advisories/GHSA-4m44-5j2g-xf64 | 36.1.3 |
| 2025-07-01T12:26:58.330742+00:00 | GithubOSV Importer | Fixing | VCID-yerd-d9uh-cyc6 | https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-4m44-5j2g-xf64/GHSA-4m44-5j2g-xf64.json | 36.1.3 |