Kindsoft KindEditor 4.1.12
Approved changes feed: RSS · Atom
cpe:2.3:a:kindsoft:kindeditor:4.1.12:*:*:*:*:*:*:*
part: a version: 4.1.12 update: *
| Vendor | Kindsoft (37235a6d-5f18-5bd6-bfe6-5fedb6ed62cf) |
|---|---|
| Product | Kindeditor (733d0388-604e-5423-9bcd-c4e29cb70dbf) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/kindsoft/kindeditor |
purl2cpe | 2026-06-01 10:11:15.208310 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-30086 |
vulnerable | 2026-06-08 05:31:46.895546 |
Details available
Cross Site Scripting (XSS) vulnerability exists in KindEditor (Chinese versions) 4.1.12, which can be exploited by an attacker to obtain user cookie information.
Published: 2021-09-28T18:17:24.000Z
Updated: 2024-08-03T22:24:59.563Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-28717 |
vulnerable | 2026-06-08 05:23:56.462682 |
Details available
Cross Site Scripting (XSS) vulnerability in content1 parameter in demo.jsp in kindsoft kindeditor version 4.1.12, allows attackers to execute arbitrary code.
Published: 2023-08-11T00:00:00.000Z
Updated: 2024-10-09T18:46:02.436Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-1002024 |
vulnerable | 2026-06-08 05:08:34.796614 |
Details available
Vulnerability in web application Kind Editor v4.1.12, kindeditor/php/upload_json.php does not check authentication before allow users to upload files.
Published: 2017-09-14T13:00:00.000Z
Updated: 2024-09-17T04:23:59.944Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.