← All advisories

Medium severity6.1NVD Advisory· Published Sep 26, 2017· Updated Jun 17, 2026

CVE-2017-14744

CVE-2017-14744

Description

UEditor 1.4.3.3 has XSS via the SRC attribute of an IFRAME element.

Affected products

2

Baidu/Ueditor2 versions
cpe:2.3:a:baidu:ueditor:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:baidu:ueditor:*:*:*:*:*:*:*:*range: <=1.4.3.3
- (no CPE)range: = 1.4.3.3

Patches

Vulnerability mechanics

References

2

ueditor.baidu.com/website/changelog.htmlnvdRelease NotesVendor Advisory
www.yuag.org/2017/09/19/ueditor%E5%82%A8%E5%AD%98%E5%9E%8Bxss%E6%BC%8F%E6%B4%9E/nvdBroken Link

News mentions

0

No linked articles in our index yet.