| Package | Affected versions | Patched versions |
|---|---|---|
| kindeditor | ≥ 4.1, ≤ 4.1.12 | |
| kindeditor | ≤ 4.1.12 |
Cross SIte Scripting (XSS) vulnerability exists in KindEditor 4.1.x via a Google search inurl:/examples/uploadbutton.html and then the .html file on the website that uses this editor (the file suffix is allowed).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free