CVE-2025-61261
EUVD-2025-3829707.11.2025, 19:16
A reflected cross-site scripting (XSS) vulnerability in CKeditor v46.1.0 & Angular v18.0.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| angular | angular | 18.0.0 |
| ckeditor | ckeditor5 | 46.1.0 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ckeditor |
| ||||||||||||||
| ckeditor3 |
| ||||||||||||||
| ldap-account-manager |
| ||||||||||||||
| request-tracker4 |
|