medium6.1
CVE-2021-42227
Cross site scripting in kindeditor
Impact
Cross SIte Scripting (XSS) vulnerability exists in KindEditor 4.1.x via a Google search inurl:/examples/uploadbutton.html and then the .html file on the website that uses this editor (the file suffix is allowed).
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | kindeditor | <= 4.1.12 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Kindsoft | Kindeditor | from 4.1 through 4.1.12 |