自己申告されたバージョン番号によると、リモートホスト上で動作するCKEditorアプリケーションは5.45.2.2の前に5.44.2.xされ、5.46.0.3の前に5.46.0.2されます。したがって、CKEditor 5クリップボードパッケージのCross-Site Scripting(XSS)脆弱性の影響を受けています。

スキャナーはこれらの問題のテストを行っておらず、代わりにアプリケーションの自己報告されたバージョン番号にのみ依存しています。

根據其自我報告的版本號，執行於遠端主機上的 CKEditor 應用程式位於 5.44.2.x5.45.2.2 之前或 5.46.0.2 之前 5.46.0.3。因此，它受到 CKEditor 5 剪貼簿套件中跨站腳本（XSS）漏洞的影響。

請注意，掃描器程式並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

根据其自报告的版本号，运行在远程主机上的 CKEditor 应用程序位于 5.44.2.x5.45.2.2 之前或 5.46.0.2 之前 5.46.0.3。因此，它受到CKEditor 5剪贴板包中跨站脚本（XSS）漏洞的影响。

请注意，扫描程序并未测试这些问题，而是仅依据应用程序自我报告的版本号进行判断。

According to its self-reported version number, the CKEditor application running on the remote host is 5.44.2.x prior to 5.45.2.2 or 5.46.0.2 prior to 5.46.0.3. It is, therefore, affected by a Cross-Site Scripting (XSS) vulnerability in the CKEditor 5 clipboard package.

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture. ckeditor5 and
    ckeditor5-clipboard versions 46.0.0 through 46.0.2 and 44.2.0 through 45.2.1 contain a Cross-Site
    Scripting (XSS) vulnerability. Ability to exploit could be triggered by a specific user action (leading to
    unauthorized JavaScript code execution) if the attacker managed to insert a malicious content into the
    editor, which might happen with a very specific editor configuration. This vulnerability affects
    installations where the editor configuration meets one of the following criteria: the HTML embed plugin is
    enabled, or there is a custom plugin introducing an editable element where view RawElement is enabled.
    This issue is fixed in versions 45.2.2 and 46.0.3 of both ckeditor5 and ckeditor5-clipboard.
    (CVE-2025-58064)

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
115160	CKEditor 5.44.2.x < 5.45.2.2 クロスサイト・スクリプト	Web App Scanning	Component Vulnerability	2026/3/10	2026/3/10	low
115161	CKEditor 5.46.0.2 < 5.46.0.3 クロスサイト・スクリプト	Web App Scanning	Component Vulnerability	2026/3/10	2026/3/10	low
115160	CKEditor 5.44.2.x < 5.45.2.2 跨站腳本	Web App Scanning	Component Vulnerability	2026/3/10	2026/3/10	low
115161	CKEditor 5.46.0.2 < 5.46.0.3 跨站腳本	Web App Scanning	Component Vulnerability	2026/3/10	2026/3/10	low
115160	CKEditor 5.44.2.x < 5.45.2.2 跨站脚本	Web App Scanning	Component Vulnerability	2026/3/10	2026/3/10	low
115161	CKEditor 5.46.0.2 < 5.46.0.3 跨站脚本	Web App Scanning	Component Vulnerability	2026/3/10	2026/3/10	low
115160	CKEditor 5.44.2.x < 5.45.2.2 Cross-Site Scripting	Web App Scanning	Component Vulnerability	2026/3/10	2026/3/10	low
115161	CKEditor 5.46.0.2 < 5.46.0.3 Cross-Site Scripting	Web App Scanning	Component Vulnerability	2026/3/10	2026/3/10	low
435182	SCA: security update for @ckeditor/ckeditor5-clipboard, ckeditor5 (GHSA-x9gp-vjh6-3wv6)	Tenable Cloud Security	SCA Checks	2025/9/3	2026/7/2	low
435182	SCA: security update for @ckeditor/ckeditor5-clipboard, ckeditor5 (GHSA-x9gp-vjh6-3wv6)	Tenable Self-Hosted Container Security	SCA Checks	2025/9/3	2026/7/2	low

检测

插件搜索

low

low

low

low

low

low

low

low

low

low