Description
A Cross Site Request Forgery (CSRF) vulnerability exists in KindEditor 4.1.x, as demonstrated by examples/uploadbutton.html.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | kindeditor | <= 4.1.12 | — | GHSA-3ww4-cp53-6g2x |
High · 8.8
CVE-2021-42228
EUVD-2021-2152GHSA-3ww4-cp53-6g2x
Cross Site Request Forgery in kindeditor
Published Oct 14, 2021 · Updated Aug 4, 2024 · Assigned by mitre