Sploitus

43 exploited vulnerabilities in Ckeditor

Vulnerabilities with publicly known exploits

Vendors
Ckeditor, Unknown, Cksource, Xwiki, Php, Fredck
With known exploits
43
Affected Xwiki Ckeditor Integration versions
< 1.64.9
Affected Xwiki versions
< 14.10.6, 15.0
Affected Impresscms versions
< 1.4.2
Affected Youdiancms versions
= 7.0
Affected Smartlogix Wp-insert versions
≤ 2.4.2
Affected Arkextensions Jck Editor versions
= 6.4.4
Affected Publiccms versions
= 5.202506.b
Affected Quickersite versions
= 1.8.5

Vulnerabilities with exploits

Highest CVSS first — 17 of these already have exploit code on Sploitus

CVE-2024-42489
CVSS 10.0 CRITICAL 2024-08-12FIX AVAILABLE
CVE-2023-36477
CVSS 10.0 CRITICAL 2023-06-30FIX AVAILABLE
CVE-2023-29209
CVSS 10.0 CRITICAL 2023-04-12FIX AVAILABLE
CVE-2022-24977
CVSS 10.0 CRITICAL 2022-02-13FIX AVAILABLE
CVE-2024-7329
CVSS 9.8 CRITICAL 2024-07-31FIX AVAILABLE
CVE-2018-17573
CVSS 9.8 CRITICAL 2018-09-28FIX AVAILABLE
CVE-2018-17254 5 exploits
CVSS 9.8 CRITICAL 2018-09-20
Joomla JCK Editor 6.4.4 - (parent) SQL Injection Exploit (2)Joomla JCK Editor 6.4.4 SQL Injection
CVE-2025-65840
CVSS 8.8 HIGH 2025-12-01FIX AVAILABLE
CVE-2018-10795
CVSS 8.8 HIGH 2018-05-07FIX AVAILABLE
CVE-2023-46694 1 exploit
CVSS 8.1 HIGH 2024-05-28FIX AVAILABLE
Exploit for CVE-2023-46694
CVE-2024-56363
CVSS 7.8 HIGH 2024-12-23FIX AVAILABLE
CVE-2008-6951
CVSS 7.5 HIGH 2009-08-12FIX AVAILABLE
CVE-2008-6677 1 exploit
CVSS 7.5 HIGH 2009-04-08FIX AVAILABLE
QuickerSite 1.8.5 - Multiple Vulnerabilities
CVE-2008-6178 3 exploits
CVSS 7.5 HIGH 2009-02-19FIX AVAILABLE
FCKeditor connector.php任意文件上传漏洞Falt4 CMS RC4 - 'FCKeditor' Arbitrary File Upload
CVE-2009-2265 10 exploits
CVSS 7.5 HIGH 2009-05-03FIX AVAILABLE
Exploit for Path Traversal in FckeditorExploit for Path Traversal in Fckeditor
CVE-2008-1993 1 exploit
CVSS 7.5 HIGH 2008-04-27FIX AVAILABLE
Acidcat CMS 3.4.1 - Multiple Vulnerabilities
CVE-2007-5567 1 exploit
CVSS 7.5 HIGH 2007-10-18
Galmeta Post 0.2 - 'Upload_Config.php' Remote File Inclusion
CVE-2006-4890 1 exploit
CVSS 7.5 HIGH 2006-09-19FIX AVAILABLE
UNAK-CMS 1.5 - 'dirroot' Remote File Inclusion
CVE-2005-4094
CVSS 7.5 HIGH 2005-12-08FIX AVAILABLE
CVE-2008-3312 1 exploit
CVSS 6.8 MEDIUM 2008-07-25
Lemon CMS 1.10 - 'browser.php' Local File Inclusion
CVE-2023-4771 1 exploit
CVSS 6.1 MEDIUM 2023-11-16FIX AVAILABLE
Exploit for Cross-site Scripting in Cksource Ckeditor
CVE-2022-42116
CVSS 6.1 MEDIUM 2022-10-18FIX AVAILABLE
CVE-2019-14315
CVSS 6.1 MEDIUM 2019-07-28FIX AVAILABLE
CVE-2018-9861
CVSS 6.1 MEDIUM 2018-04-19FIX AVAILABLE
CVE-2018-17960
CVSS 6.1 MEDIUM 2018-11-14FIX AVAILABLE
CVE-2020-23044
CVSS 5.4 MEDIUM 2021-10-22
CVE-2020-36492
CVSS 5.4 MEDIUM 2021-10-22FIX AVAILABLE
CVE-2020-36491
CVSS 5.4 MEDIUM 2021-10-22
CVE-2020-36490
CVSS 5.4 MEDIUM 2021-10-22
CVE-2020-36493
CVSS 5.4 MEDIUM 2021-10-22
CVE-2025-59547
CVSS 5.3 MEDIUM 2025-09-23FIX AVAILABLE
CVE-2006-5730 1 exploit
CVSS 5.1 MEDIUM 2006-11-06
MODx CMS 0.9.2.1 - 'FCKeditor' Remote File Inclusion
CVE-2006-3362 1 exploit
CVSS 5.1 MEDIUM 2006-07-06
GeekLog 1.4.0sr3 - 'f(u)ckeditor' Remote Code Execution
CVE-2006-0658 2 exploits
CVSS 5.0 MEDIUM 2006-02-13FIX AVAILABLE
InoutMailingListManager 3.1 - Remote Command ExecutionFCKEditor 2.0 < 2.2 - 'FileManager connector.php' Arbitrary File Upload
CVE-2005-4095 1 exploit
CVSS 5.0 MEDIUM 2005-12-08FIX AVAILABLE
DoceboLms 2.0.4 - 'connector.php' Arbitrary File Upload
CVE-2005-0613 2 exploits
CVSS 5.0 MEDIUM 2005-02-28FIX AVAILABLE
Nuke ET 3.4 - 'FCKeditor' Arbitrary File UploadInoutMailingListManager 3.1 - Remote Command Execution
CVE-2020-36389
CVSS 4.3 MEDIUM 2020-08-10FIX AVAILABLE
CVE-2014-4037
CVSS 4.3 MEDIUM 2014-06-11FIX AVAILABLE
CVE-2012-2722
CVSS 4.3 MEDIUM 2012-06-27FIX AVAILABLE
CVE-2012-4000 2 exploits
CVSS 4.3 MEDIUM 2012-07-12FIX AVAILABLE
FCKeditor 2.6.10 Cross Site ScriptingFCKEditor Core - 'Editor 'spellchecker.php' Cross-Site Scripting
CVE-2007-2901 1 exploit
CVSS 4.3 MEDIUM 2007-05-30
Dokeos 1.8.0 - 'my_progress.php?course' SQL Injection
CVE-2006-6978
CVSS 4.3 MEDIUM 2007-02-08
CVE-2025-9103
CVSS 3.3 LOW 2025-08-18