Kindeditor 跨站脚本漏洞

Kindeditor is a lightweight web-based open source HTML rich text editor from the Kindeditor community. KindEditor A cross-site scripting vulnerability exists, which stems from a cross-site scripting vulnerability in all versions of KindEditor. An attacker can exploit this vulnerability to obtain...

CVE-2021-37267: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability exists in all versions of KindEditor, which can be exploited by an attacker to obtain user cookie information...

CVE-2021-30086: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability exists in KindEditor Chinese versions 4.1.12, which can be exploited by an attacker to obtain user cookie information...

CVE-2020-18022

Cross Site Scripting XSS in Qibosoft QiboCMS v7 and earlier allows remote attackers to execute arbitrary code or obtain sensitive information by injecting arbitrary commands in a HTTP request to the "ewebeditor\3.1.1\kindeditor.js" component...

CVE-2020-18022

CVE-2020-18022 affects Qibosoft QiboCMS v7 and earlier via a flaw in the embedded editor component (ewebeditor 3.1.1 / kindeditor.js). The vulnerability allows remote attackers to inject commands through HTTP requests, enabling Cross Site Scripting (XSS) that can lead to arbitrary code execution ...

XSS Vulnerability in KindEditor Editor

KindEditor is a powerful free HTML editor. KindEditor editor has an XSS vulnerability that can be exploited by attackers to obtain user cookie information...

KindEditor is vulnerable to XSS

KindEditor is a set of open source online HTML editor . KindEditor has an XSS vulnerability that can be exploited by attackers to obtain user cookie information...

Directory Traversal Vulnerability in KindEditor Editor

KindEditor is a set of open source online HTML editor . A directory traversal vulnerability exists in the KindEditor editor. An attacker can exploit this vulnerability to obtain sensitive information...

CVE-2019-7543

In KindEditor 4.1.11, the php/demo.php content1 parameter has a reflected Cross-site Scripting XSS vulnerability...

Cross site scripting

In KindEditor 4.1.11, the php/demo.php content1 parameter has a reflected Cross-site Scripting XSS vulnerability...

CVE-2019-7543

In KindEditor 4.1.11, the php/demo.php content1 parameter has a reflected Cross-site Scripting XSS vulnerability...

CVE-2019-7543

In KindEditor 4.1.11, the php/demo.php content1 parameter has a reflected Cross-site Scripting XSS vulnerability...

CVE-2019-7543

In KindEditor 4.1.11, the php/demo.php content1 parameter has a reflected Cross-site Scripting XSS vulnerability...

CVE-2019-7543

KindEditor 4.1.11 is affected by a reflected XSS via the php/demo.php content1 parameter. The vulnerability allows an attacker to inject JavaScript that executes in the victim’s browser, potentially leading to session hijacking, defacement, or theft of sensitive information. Root cause: improper ...

PT-2019-18635

Name of the Vulnerable Software and Affected Versions KindEditor version 4.1.11 Description The issue is related to a reflected Cross-site Scripting XSS vulnerability. This occurs in the content1 parameter of the php/demo.php endpoint. Recommendations For KindEditor version 4.1.11, as a temporary...

CVE-2019-7543: Improper Neutralization of Input During Web Page Generation

In KindEditor 4.1.11, the php/demo.php content1 parameter has a reflected Cross-site Scripting XSS vulnerability...

Directory Traversal

kindeditor is vulnerable to directory traversal attacks. The vulnerability exists in php/uploadjson.php where directory information can be listed in the kindeditor/attached/ folder via the path parameter...

CVE-2018-18950

KindEditor through 4.1.11 has a path traversal vulnerability in php/uploadjson.php. Anyone can browse a file or directory in the kindeditor/attached/ folder via the path parameter without authentication...

Path traversal

KindEditor through 4.1.11 has a path traversal vulnerability in php/uploadjson.php. Anyone can browse a file or directory in the kindeditor/attached/ folder via the path parameter without authentication...

CVE-2018-18950

KindEditor through 4.1.11 has a path traversal vulnerability in php/uploadjson.php. Anyone can browse a file or directory in the kindeditor/attached/ folder via the path parameter without authentication...