CVE-2025-25299
2 advisories.
npm/@ckeditor/ckeditor5-real-time-collaboration CVE-2025-25299: low 2.3, EPSS 0.60%
Cross-site scripting (XSS) in the CKEditor 5 real-time collaboration package
Action: Upgrade @ckeditor/ckeditor5-real-time-collaboration to 44.2.1 or later.
npm i @ckeditor/ckeditor5-real-time-collaboration@44.2.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 41.3.0 | 44.2.1 | - |
Fixed versions
| 44.2.1 |
Sources
- osv: GHSA-j3mm-wmfm-mwvh
- nvd: CVE-2025-25299
- https://github.com/ckeditor/ckeditor5/security/advisories/GHSA-j3mm-wmfm-mwvh
- https://ckeditor.com/docs/ckeditor5/latest/features/collaboration/real-time-collaboration/real-time-collaboration.html
- https://ckeditor.com/docs/ckeditor5/latest/features/collaboration/real-time-collaboration/real-time-collaboration.html?docId=ee1dca024c9b4e44aef039f99ebe6c664
- https://github.com/ckeditor/ckeditor5
- https://github.com/ckeditor/ckeditor5/releases/tag/v44.2.1
CVE-2025-25299 · published · modified · JSON
npm/ckeditor5-premium-features CVE-2025-25299: low 2.3, EPSS 0.60%
Cross-site scripting (XSS) in the CKEditor 5 real-time collaboration package
Action: Upgrade ckeditor5-premium-features to 44.2.1 or later.
npm i ckeditor5-premium-features@44.2.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 42.0.0 | 44.2.1 | - |
Fixed versions
| 44.2.1 |
Sources
- osv: GHSA-j3mm-wmfm-mwvh#npm/ckeditor5-premium-features
- nvd: CVE-2025-25299
- https://github.com/ckeditor/ckeditor5/security/advisories/GHSA-j3mm-wmfm-mwvh
- https://ckeditor.com/docs/ckeditor5/latest/features/collaboration/real-time-collaboration/real-time-collaboration.html
- https://ckeditor.com/docs/ckeditor5/latest/features/collaboration/real-time-collaboration/real-time-collaboration.html?docId=ee1dca024c9b4e44aef039f99ebe6c664
- https://github.com/ckeditor/ckeditor5
- https://github.com/ckeditor/ckeditor5/releases/tag/v44.2.1
CVE-2025-25299 · published · modified · JSON