Design/Logic Flaw

2017-09-2606:29:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

31.5%

UEditor 1.4.3.3 has XSS via the SRC attribute of an IFRAME element.

CPENameOperatorVersion
ueditorle1.4.3.3

CPE	Name	Operator	Version
	ueditor	le	1.4.3.3

References

ueditor.baidu.com/website/changelog.html

www.yuag.org/2017/09/19/ueditor%E5%82%A8%E5%AD%98%E5%9E%8Bxss%E6%BC%8F%E6%B4%9E/

0.001 Low

EPSS

Percentile

31.5%

Related for PRION:CVE-2017-14744