PT-2026-97623

Name of the Vulnerable Software and Affected Versions SEMCMS versions prior to 4.3 Description A flaw exists in the KindEditor Upload Interface component within the file '/Edit/php/upload json.php'. Remote manipulation of the imgFile argument allows for cross-site scripting, a technique where...

PT-2018-14739

Name of the Vulnerable Software and Affected Versions KindEditor versions prior to 4.1.12 Description The issue allows unauthorized access to files or directories within the kindeditor/attached/ folder via the path parameter in php/upload json.php, without requiring authentication. Recommendation...