{"id":"EUVD-2026-111365","enisaUuid":"db32d5b9-e978-3f7e-ba7c-4aec0d1096d3","description":"CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture. From 29.0.0 until 47.7.4 and 48.5.1, specially crafted markup can trigger cross-site scripting when General HTML Support is enabled and specifically configured to allow object content. Processing that content can execute attacker-controlled JavaScript in a browser context isolated from the origin of the application embedding the editor. This issue is fixed in versions 47.7.4 and 48.5.1.","datePublished":"Oct 27, 2026, 7:33:11 PM","dateUpdated":"Oct 27, 2026, 7:33:11 PM","baseScore":3.1,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","references":"https://github.com/ckeditor/ckeditor5/security/advisories/GHSA-v6mg-96c6-gmpq\nhttps://github.com/ckeditor/ckeditor5/commit/4d9c5bb34f63cd956d15ccafbe584e14280c86a0\nhttps://github.com/ckeditor/ckeditor5/commit/a750e38635db6a18c5b11599c09f4fd702850423\nhttps://github.com/ckeditor/ckeditor5/releases/tag/v47.7.4\nhttps://github.com/ckeditor/ckeditor5/releases/tag/v48.5.1\n","aliases":"CVE-2026-116687\nGHSA-v6mg-96c6-gmpq\n","assigner":"GitHub_M","epss":0.25,"enisaIdProduct":[{"id":"45dc532a-9af7-38af-aca5-c03beec1e679","product":{"name":"ckeditor5","vendor":{"name":"ckeditor"}},"product_version":"48.0.0, \u003c 48.5.1"},{"id":"f62b860a-fe2d-312b-a0e2-bc980b5ec054","product":{"name":"ckeditor5","vendor":{"name":"ckeditor"}},"product_version":"29.0.0, \u003c 47.7.4"}],"enisaIdVendor":[{"id":"14e87f9f-f843-388f-ac4a-4d5eee3b71bd","vendor":{"name":"ckeditor"}}],"enisaIdVulnerability":[{"id":"25d37d10-c6be-3649-ac08-6f8480c88a9f","vulnerability":{"id":"GHSA-v6mg-96c6-gmpq","description":"CKEditor: Cross-site scripting (XSS) in the engine package","datePublished":"Oct 27, 2026, 9:05:13 PM","dateUpdated":"Oct 27, 2026, 9:05:13 PM","baseScore":0.0,"references":"https://github.com/ckeditor/ckeditor5/security/advisories/GHSA-v6mg-96c6-gmpq\nhttps://github.com/ckeditor/ckeditor5/commit/4d9c5bb34f63cd956d15ccafbe584e14280c86a0\nhttps://github.com/ckeditor/ckeditor5/commit/a750e38635db6a18c5b11599c09f4fd702850423\nhttps://github.com/ckeditor/ckeditor5\nhttps://github.com/ckeditor/ckeditor5/releases/tag/v47.7.4\nhttps://github.com/ckeditor/ckeditor5/releases/tag/v48.5.1\n","enisa_id":"EUVD-2026-111365\n","aliases":"GHSA-v6mg-96c6-gmpq\nCVE-2026-116687\n","epss":0.0,"dataProcessed":"Oct 29, 2026, 11:01:28 PM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"3c0cb16a-9b6b-31cf-ac9d-c6e114a15858","vulnerability":{"id":"CVE-2026-116687","description":"CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture. From 29.0.0 until 47.7.4 and 48.5.1, specially crafted markup can trigger cross-site scripting when General HTML Support is enabled and specifically configured to allow object content. Processing that content can execute attacker-controlled JavaScript in a browser context isolated from the origin of the application embedding the editor. This issue is fixed in versions 47.7.4 and 48.5.1.","datePublished":"Oct 27, 2026, 7:33:11 PM","dateUpdated":"Oct 27, 2026, 7:33:11 PM","status":"PUBLISHED","baseScore":3.1,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","references":"https://github.com/ckeditor/ckeditor5/security/advisories/GHSA-v6mg-96c6-gmpq\nhttps://github.com/ckeditor/ckeditor5/commit/4d9c5bb34f63cd956d15ccafbe584e14280c86a0\nhttps://github.com/ckeditor/ckeditor5/commit/a750e38635db6a18c5b11599c09f4fd702850423\nhttps://github.com/ckeditor/ckeditor5/releases/tag/v47.7.4\nhttps://github.com/ckeditor/ckeditor5/releases/tag/v48.5.1\n","enisa_id":"EUVD-2026-111365\n","assigner":"GitHub_M","epss":0.25,"dataProcessed":"Oct 29, 2026, 11:01:04 PM","vulnerabilityProduct":[{"id":"a73449a6-4ac2-3f40-a4de-5445c75241b5","product":{"name":"ckeditor5","vendor":{"name":"ckeditor"}},"product_version":"48.0.0, \u003c 48.5.1"},{"id":"ec18c24c-6ded-3882-91ce-1d8ec0fa5a8e","product":{"name":"ckeditor5","vendor":{"name":"ckeditor"}},"product_version":"29.0.0, \u003c 47.7.4"}],"vulnerabilityVendor":[{"id":"679d79f0-548e-3e11-b3f9-61efbe4879e2","vendor":{"name":"ckeditor"}}]}}],"enisaIdAdvisory":[]}