CVE-2023-4771: Cksource Ckeditor

Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days.

A Cross-Site scripting vulnerability has been found in CKSource CKEditor affecting versions 4.15.1 and earlier. An attacker could send malicious javascript code through the /ckeditor/samples/old/ajax.html file and retrieve an authorized user's information.

Affected products

• Cksource Ckeditor: up to and including 4.15.1

Published 2023-11-16. Last modified 2026-06-17.