Kindeditor 跨站脚本漏洞

Kindeditor is a lightweight web-based open source HTML rich text editor from the Kindeditor community. KindEditor A cross-site scripting vulnerability exists, which stems from a cross-site scripting vulnerability in all versions of KindEditor. An attacker can exploit this vulnerability to obtain...

Kindeditor 跨站脚本漏洞

Kindeditor is a Web-based lightweight open source HTML rich text editor from the Kindeditor community. KindEditor Cross-site scripting vulnerability exists, the vulnerability stems from KindEditor Chinese version 4.1.12 cross-site scripting XSS vulnerability. An attacker can exploit this...

CVE-2020-18022

Cross Site Scripting XSS in Qibosoft QiboCMS v7 and earlier allows remote attackers to execute arbitrary code or obtain sensitive information by injecting arbitrary commands in a HTTP request to the "ewebeditor\3.1.1\kindeditor.js" component...

CVE-2020-18022

CVE-2020-18022 affects Qibosoft QiboCMS v7 and earlier via a flaw in the embedded editor component (ewebeditor 3.1.1 / kindeditor.js). The vulnerability allows remote attackers to inject commands through HTTP requests, enabling Cross Site Scripting (XSS) that can lead to arbitrary code execution ...

XSS Vulnerability in KindEditor Editor

KindEditor is a powerful free HTML editor. KindEditor editor has an XSS vulnerability that can be exploited by attackers to obtain user cookie information...

KindEditor is vulnerable to XSS

KindEditor is a set of open source online HTML editor . KindEditor has an XSS vulnerability that can be exploited by attackers to obtain user cookie information...

Directory Traversal Vulnerability in KindEditor Editor

KindEditor is a set of open source online HTML editor . A directory traversal vulnerability exists in the KindEditor editor. An attacker can exploit this vulnerability to obtain sensitive information...

Cross site scripting

In KindEditor 4.1.11, the php/demo.php content1 parameter has a reflected Cross-site Scripting XSS vulnerability...

CVE-2019-7543

In KindEditor 4.1.11, the php/demo.php content1 parameter has a reflected Cross-site Scripting XSS vulnerability...

CVE-2019-7543

In KindEditor 4.1.11, the php/demo.php content1 parameter has a reflected Cross-site Scripting XSS vulnerability...

CVE-2019-7543

In KindEditor 4.1.11, the php/demo.php content1 parameter has a reflected Cross-site Scripting XSS vulnerability...

CVE-2019-7543

KindEditor 4.1.11 is affected by a reflected XSS via the php/demo.php content1 parameter. The vulnerability allows an attacker to inject JavaScript that executes in the victim’s browser, potentially leading to session hijacking, defacement, or theft of sensitive information. Root cause: improper ...

Directory Traversal

kindeditor is vulnerable to directory traversal attacks. The vulnerability exists in php/uploadjson.php where directory information can be listed in the kindeditor/attached/ folder via the path parameter...

CVE-2018-18950

KindEditor through 4.1.11 has a path traversal vulnerability in php/uploadjson.php. Anyone can browse a file or directory in the kindeditor/attached/ folder via the path parameter without authentication...

Path traversal

KindEditor through 4.1.11 has a path traversal vulnerability in php/uploadjson.php. Anyone can browse a file or directory in the kindeditor/attached/ folder via the path parameter without authentication...

CVE-2018-18950

KindEditor through 4.1.11 has a path traversal vulnerability in php/uploadjson.php. Anyone can browse a file or directory in the kindeditor/attached/ folder via the path parameter without authentication...

CVE-2018-18950

KindEditor prior to 4.1.11 is affected by a path traversal vulnerability in php/upload_json.php, enabling anyone to browse files/directories under kindeditor/attached/ via the path parameter without authentication. This is a unauthenticated information disclosure/vulnerability that can expose pri...

CVE-2018-18950

KindEditor through 4.1.11 has a path traversal vulnerability in php/uploadjson.php. Anyone can browse a file or directory in the kindeditor/attached/ folder via the path parameter without authentication...

Remote File Upload

kindeditor is vulnerable to remote file upload. The library does not check whether a user has the permission to upload files to the system, allowing a malicious user to upload an arbitrary file to the system through a POST request to the php/uploadjson.php file...

KindEditor cross-site scripting vulnerability

No description provided by source...