Cross SIte Scripting (XSS) vulnerability exists in KindEditor 4.1.x via a Google search inurl:/examples/uploadbutton.html and then the .html file on the website that uses this editor (the file suffix is allowed).
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| kindeditor(npm) | 0 | N/A | N/A |
CVSS Metrics
