medium4.3
CVE-2017-1002024
Vulnerability in web application Kind Editor v4.1.12, kindeditor/php/upload_json.php does not check authentication before allow users to upload files.
Impact
Vulnerability in web application Kind Editor v4.1.12, kindeditor/php/upload_json.php does not check authentication before allow users to upload files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Kindsoft | Kind Editor | through 3.5.6 Versions 4.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4 |
| Kindsoft | Kindeditor | Version 4.1.12 |