medium5.4
CVE-2021-37271
Cross Site Scripting (XSS) vulnerability exists in UEditor v1.4.3.3, which can be exploited by an attacker to obtain user cookie information.
Impact
Cross Site Scripting (XSS) vulnerability exists in UEditor v1.4.3.3, which can be exploited by an attacker to obtain user cookie information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Baidu | Ueditor | Version 1.4.3.3 |