~ / search / GHSA-wv83-jrfh-rp33

GHSA-wv83-jrfh-rp33

Cross site scripting in kindeditor

Source: GitHub Advisory Database (reviewed) Moderate CVE-2021-42227

Packages

EcosystemPackageAffectedFixed in
npm kindeditor <= 4.1.12 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Cross SIte Scripting (XSS) vulnerability exists in KindEditor 4.1.x via a Google search inurl:/examples/uploadbutton.html and then the .html file on the website that uses this editor (the file suffix is allowed).

References

External links from the advisory. They lead to third-party sites.