CVE-2021-30086

2021-09-2819:15:07

Google

osv.dev

cve-2021-30086

cross site scripting

kindeditor

chinese versions

user cookie

software

AI Score

5.7

Confidence

High

EPSS

0.001

Percentile

29.3%

JSON

Cross Site Scripting (XSS) vulnerability exists in KindEditor (Chinese versions) 4.1.12, which can be exploited by an attacker to obtain user cookie information.

References

github.com/kindsoft/kindeditor/

www.cnvd.org.cn/flaw/show/3257066