Description

A reflected cross-site scripting (XSS) vulnerability in CKeditor v46.1.0 & Angular v18.0.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload.

INFO

Published Date :

2025-11-07T00:00:00.000Z

Last Modified :

2025-11-07T19:28:12.951Z

Source :

mitre
AFFECTED PRODUCTS

The following products are affected by CVE-2025-61261 vulnerability.

Vendors Products
Angular
  • Angular
Ckeditor
  • Ckeditor5
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-61261.

CVSS Vulnerability Scoring System