Kindsoft

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Kindsoft records in CISA KEV

No Kindsoft vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Kindeditor 7 records MEDIUM Kind Editor 1 record LOW

Records

7 records in Kindeditor · all components

TI-2020-17394 CVE-2020-28717 · GHSA-q396-mv33-45w4

Cross Site Scripting (XSS) vulnerability in content1 parameter in demo.jsp in kindsoft…

MEDIUM 60

Cross Site Scripting (XSS) vulnerability in content1 parameter in demo.jsp in kindsoft kindeditor version 4.1.12, allows attackers to execute arbitrary code.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00521 Published 2023-08-11 No fix listed CWE-79

TI-2021-18682 CVE-2021-42228 · GHSA-3ww4-cp53-6g2x

A Cross Site Request Forgery (CSRF) vulnerability exists in KindEditor 4.1.x, as…

MEDIUM 40

A Cross Site Request Forgery (CSRF) vulnerability exists in KindEditor 4.1.x, as demonstrated by examples/uploadbutton.html.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00989 Published 2021-10-14 No fix listed CWE-352

TI-2019-05324 CVE-2019-7543 · GHSA-28cf-wp7q-c9fm

In KindEditor 4.1.11, the php/demo.php content1 parameter has a reflected Cross-site Scripting (XSS) vulnerability.

LOW 34

In KindEditor 4.1.11, the php/demo.php content1 parameter has a reflected Cross-site Scripting (XSS) vulnerability.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.03647 Published 2019-02-06 No fix listed CWE-79

TI-2021-18681 CVE-2021-42227 · GHSA-wv83-jrfh-rp33

Cross SIte Scripting (XSS) vulnerability exists in KindEditor 4.1.x via a Google search…

LOW 29

Cross SIte Scripting (XSS) vulnerability exists in KindEditor 4.1.x via a Google search inurl:/examples/uploadbutton.html and then the .html file on the website that uses this editor (the file suffix is allowed).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00937 Published 2021-10-14 No fix listed CWE-79

TI-2021-15290 CVE-2021-37267 · GHSA-vhc9-rh7r-4vc7

Cross Site Scripting (XSS) vulnerability exists in all versions of KindEditor, which can…

LOW 28

Cross Site Scripting (XSS) vulnerability exists in all versions of KindEditor, which can be exploited by an attacker to obtain user cookie information.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00581 Published 2021-09-28 No fix listed CWE-79

TI-2021-10657 CVE-2021-30086 · GHSA-x5r3-q4hf-qh52

Cross Site Scripting (XSS) vulnerability exists in KindEditor (Chinese versions) 4.1.12…

LOW 28

Cross Site Scripting (XSS) vulnerability exists in KindEditor (Chinese versions) 4.1.12, which can be exploited by an attacker to obtain user cookie information.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00685 Published 2021-09-28 No fix listed CWE-79

TI-2017-14749 CVE-2017-1002024 · GHSA-q932-hr86-c9wg

Improper authentication in Kind Editor

LOW 23

Vulnerability in web application Kind Editor v4.1.12, kindeditor/php/upload_json.php does not check authentication before allow users to upload files.

CVSS 3.0MEDIUM 4.3 Network Low privileges No interaction EPSS 0.01346 Published 2017-09-14 Fixed in 4.1.12 CWE-287

Open these records in search →

Critical	0
High	1
Medium	6
Low	0
No CVSS	0