CVE-2021-37271

MEDIUM CVSS: 5.4 Published: 2021-09-28 Modified: 2026-06-17

Description

Cross Site Scripting (XSS) vulnerability exists in UEditor v1.4.3.3, which can be exploited by an attacker to obtain user cookie information.

Affected Platforms

Baidu Ueditor

Weakness Type

CWE-79

References