CVE-2020-18145

2021-07-1418:15:09

Google

osv.dev

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.5%

Cross Site Scripting (XSS) vulnerability in umeditor v1.2.3 via /public/common/umeditor/php/getcontent.php.

CPENameOperatorVersion
umeditoreq1.1.0
umeditoreq1.2.2
umeditoreq1.2.0
umeditoreq1.0.0
umeditoreq1.2.3
umeditoreq1.2.1

Name	Operator	Version
umeditor	eq	1.1.0
umeditor	eq	1.2.2
umeditor	eq	1.2.0
umeditor	eq	1.0.0
umeditor	eq	1.2.3
umeditor	eq	1.2.1

References

github.com/fex-team/umeditor/issues/624