Kind Editor Inc.

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Kind Editor Inc. records in CISA KEV

No Kind Editor Inc. vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Kindeditor 1 record LOW

Records

2 records

TI-2018-13426 CVE-2018-18950 · GHSA-xg98-5m8g-vc99

KindEditor through 4.1.11 has a path traversal vulnerability in php/upload_json.php.

LOW 37

KindEditor through 4.1.11 has a path traversal vulnerability in php/upload_json.php.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02149 Published 2018-11-05 No fix listed CWE-22

TI-2017-14749 CVE-2017-1002024 · GHSA-q932-hr86-c9wg

Improper authentication in Kind Editor

LOW 23

Vulnerability in web application Kind Editor v4.1.12, kindeditor/php/upload_json.php does not check authentication before allow users to upload files.

CVSS 3.0MEDIUM 4.3 Network Low privileges No interaction EPSS 0.01346 Published 2017-09-14 Fixed in 4.1.12 CWE-287

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0