← Database

CVE-2021-42227

MEDIUM CVSS: 6.1 Published: 2021-10-14 Modified: 2026-06-17

Description

Cross SIte Scripting (XSS) vulnerability exists in KindEditor 4.1.x via a Google search inurl:/examples/uploadbutton.html and then the .html file on the website that uses this editor (the file suffix is allowed).

Affected Platforms

Kindsoft Kindeditor

Weakness Type

CWE-79

References