CVE-2020-28717

Cross Site Scripting XSS vulnerability in content1 parameter in demo.jsp in kindsoft kindeditor version 4.1.12, allows attackers to execute arbitrary code...

CVE-2020-28717

Cross Site Scripting XSS vulnerability in content1 parameter in demo.jsp in kindsoft kindeditor version 4.1.12, allows attackers to execute arbitrary code...

CVE-2020-28717

The CVE-2020-28717 issue affects kindeditor (KindEditor) version 4.1.12, specifically the content1 parameter in demo.jsp. The root cause is a Cross-Site Scripting (XSS) vulnerability due to improper input sanitization in that parameter, allowing an attacker to inject and execute arbitrary JavaScr...