Umeditor Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Umeditor Project records in CISA KEV

No Umeditor Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Umeditor · all components

TI-2024-35790 CVE-2024-53387 · GHSA-35g5-m5m3-r8mx

HIGH 73

A DOM Clobbering vulnerability in umeditor v1.2.3 allows attackers to execute arbitrary code via supplying a crafted HTML element.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00623 Published 2025-03-03 No fix listed CWE-79