Cross-site Scripting (XSS)

kindeditor is vulnerable to Cross-site Scripting.The vulnerability exists due to improper input sanitization in the content1 parameter of demo.jsp which allows an attacker to inject and execute malicious JavaScript into the browser...

CVE-2020-28717

Cross Site Scripting XSS vulnerability in content1 parameter in demo.jsp in kindsoft kindeditor version 4.1.12, allows attackers to execute arbitrary code...

CVE-2020-28717

Cross Site Scripting XSS vulnerability in content1 parameter in demo.jsp in kindsoft kindeditor version 4.1.12, allows attackers to execute arbitrary code...

Cross site scripting

Cross Site Scripting XSS vulnerability in content1 parameter in demo.jsp in kindsoft kindeditor version 4.1.12, allows attackers to execute arbitrary code...

PT-2023-11769 · Unknown · Kindeditor

Name of the Vulnerable Software and Affected Versions: kindeditor version 4.1.12 Description: The issue is related to a Cross Site Scripting XSS vulnerability in the content1 parameter in demo.jsp of kindeditor. This allows attackers to execute arbitrary code. Recommendations: For kindeditor...

CVE-2020-28717

Cross Site Scripting XSS vulnerability in content1 parameter in demo.jsp in kindsoft kindeditor version 4.1.12, allows attackers to execute arbitrary code...

CVE-2020-28717

The CVE-2020-28717 issue affects kindeditor (KindEditor) version 4.1.12, specifically the content1 parameter in demo.jsp. The root cause is a Cross-Site Scripting (XSS) vulnerability due to improper input sanitization in that parameter, allowing an attacker to inject and execute arbitrary JavaScr...

Kindeditor Cross-Site Scripting Vulnerability

Kindeditor is a lightweight web-based open source HTML rich text editor from the Kindeditor community. A security vulnerability exists in kindeditor version 4.1.12, which originates from a cross-site scripting XSS vulnerability in parameter content1. An attacker can exploit this vulnerability to...

0.8.18-p11 (=0.8.18-p12), @msvx/component (>=1.0.1 <=1.2.2) +24 more potentially affected by CVE-2021-42227 via kindeditor (=4.1.10)

kindeditor NPM version =4.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on kindeditor and may be impacted: - 0.8.18-p11 =0.8.18-p12 - @msvx/component =1.0.1, =0.0.1, =0.2.3, =0.1.1, =0.0.1, =0.0.3-p12, =4.1.9, =1.3.50, =1.0.0, =0.0.1, =0.2.49,...

GHSA-WV83-JRFH-RP33 Cross site scripting in kindeditor

Cross SIte Scripting XSS vulnerability exists in KindEditor 4.1.x via a Google search inurl:/examples/uploadbutton.html and then the .html file on the website that uses this editor the file suffix is allowed...

Cross site scripting in kindeditor

Cross SIte Scripting XSS vulnerability exists in KindEditor 4.1.x via a Google search inurl:/examples/uploadbutton.html and then the .html file on the website that uses this editor the file suffix is allowed...

0.8.18-p11 (=0.8.18-p12), @msvx/component (>=1.0.1 <=1.2.2) +24 more potentially affected by CVE-2021-42228 via kindeditor (=4.1.10)

kindeditor NPM version =4.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on kindeditor and may be impacted: - 0.8.18-p11 =0.8.18-p12 - @msvx/component =1.0.1, =0.0.1, =0.2.3, =0.1.1, =0.0.1, =0.0.3-p12, =4.1.9, =1.3.50, =1.0.0, =0.0.1, =0.2.49,...

GHSA-3WW4-CP53-6G2X Cross Site Request Forgery in kindeditor

Cross Site Request Forgery CSRF vulnerability exists in KindEditor 4.1.x. First, you upload an html file containing csrf on the website that uses a google editor, you only need to search in google: inurl:/examples/uploadbutton.html and then use the authority of this website to trick users into...

Cross Site Request Forgery in kindeditor

Cross Site Request Forgery CSRF vulnerability exists in KindEditor 4.1.x. First, you upload an html file containing csrf on the website that uses a google editor, you only need to search in google: inurl:/examples/uploadbutton.html and then use the authority of this website to trick users into...

KindEdirot Cross-Site Request Forgery Vulnerability

Kindeditor is a lightweight open source web-based HTML rich text editor from the Kindeditor community.KindEdirot suffers from a cross-site request forgery vulnerability, which stems from WEB applications that do not adequately validate that requests come from trusted users. An attacker could...

KindEditor XSS Vulnerability

KindEditor is a lightweight, open source LGPL, cross-browser, web-based WYSIWYG HTML editor. KindEditor is capable of converting standard text areas to rich text editors. an XSS vulnerability exists in KindEditor prior to version 4.1.x. The vulnerability is related to the affected version not...

CVE-2021-42227

Cross SIte Scripting XSS vulnerability exists in KindEditor 4.1.x via a Google search inurl:/examples/uploadbutton.html and then the .html file on the website that uses this editor the file suffix is allowed...

CVE-2021-42228

A Cross Site Request Forgery CSRF vulnerability exists in KindEditor 4.1.x, as demonstrated by examples/uploadbutton.html...

CVE-2021-42228

A Cross Site Request Forgery CSRF vulnerability exists in KindEditor 4.1.x, as demonstrated by examples/uploadbutton.html...

Cross site scripting

Cross SIte Scripting XSS vulnerability exists in KindEditor 4.1.x via a Google search inurl:/examples/uploadbutton.html and then the .html file on the website that uses this editor the file suffix is allowed...