CVE-2021-42228

2021-10-1417:15:00

Google

osv.dev

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.3%

JSON

A Cross Site Request Forgery (CSRF) vulnerability exists in KindEditor 4.1.x, as demonstrated by examples/uploadbutton.html.

CPENameOperatorVersion
kindeditoreq4.1.5
kindeditoreq4.1.12
kindeditoreq4.1.4
kindeditoreq4.1.11
kindeditoreq4.1.10
kindeditoreq4.1.1
kindeditoreq4.1.2
kindeditoreq4.1.3
kindeditoreq4.1.6
kindeditoreq4.1.9

Name	Operator	Version
kindeditor	eq	4.1.5
kindeditor	eq	4.1.12
kindeditor	eq	4.1.4
kindeditor	eq	4.1.11
kindeditor	eq	4.1.10
kindeditor	eq	4.1.1
kindeditor	eq	4.1.2
kindeditor	eq	4.1.3
kindeditor	eq	4.1.6
kindeditor	eq	4.1.9