CVE-2018-18950

KindEditor through 4.1.11 has a path traversal vulnerability in php/uploadjson.php. Anyone can browse a file or directory in the kindeditor/attached/ folder via the path parameter without authentication...

PT-2018-14739

Name of the Vulnerable Software and Affected Versions KindEditor versions prior to 4.1.12 Description The issue allows unauthorized access to files or directories within the kindeditor/attached/ folder via the path parameter in php/upload json.php, without requiring authentication. Recommendation...