Skip to content
OpenAdvisories

Package · npm

kindeditor

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 8.8
    CVE-2021-42228

    Cross Site Request Forgery in kindeditor

    A Cross Site Request Forgery (CSRF) vulnerability exists in KindEditor 4.1.x, as demonstrated by examples/uploadbutton.html.

    kindeditor npm
  • Medium 6.1
    CVE-2021-42227

    Cross site scripting in kindeditor

    Cross SIte Scripting (XSS) vulnerability exists in KindEditor 4.1.x via a Google search inurl:/examples/uploadbutton.html and then the .html file on the website that uses this editor (the file suffix is allowed).

    kindeditor npm