Approved changes feed: RSS · Atom

cpe:2.3:a:kindsoft:kindeditor:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorKindsoft (37235a6d-5f18-5bd6-bfe6-5fedb6ed62cf)
ProductKindeditor (733d0388-604e-5423-9bcd-c4e29cb70dbf)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/kindsoft/kindeditor purl2cpe 2026-06-01 10:11:15.208292

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-42228 vulnerable 2026-06-08 05:35:21.958431 Details available
A Cross Site Request Forgery (CSRF) vulnerability exists in KindEditor 4.1.x, as demonstrated by examples/uploadbutton.html.
Published: 2021-10-14T16:38:58.000Z
Updated: 2024-08-04T03:30:37.786Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-42227 vulnerable 2026-06-08 05:35:21.958047 Details available
Cross SIte Scripting (XSS) vulnerability exists in KindEditor 4.1.x via a Google search inurl:/examples/uploadbutton.html and then the .html file on the website that uses this editor (the file suffix is allowed).
Published: 2021-10-14T16:35:26.000Z
Updated: 2024-08-04T03:30:37.995Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.