← All advisories

Medium severity6.1NVD Advisory· Published Jul 14, 2021· Updated Jun 17, 2026

CVE-2020-18145

CVE-2020-18145

Description

Cross Site Scripting (XSS) vulnerability in umeditor v1.2.3 via /public/common/umeditor/php/getcontent.php.

Affected products

4

umeditor/umeditordescription
Umeditor/umeditorllm-create
Range: <1.2.3
fex-team/umeditorllm-fuzzy
Range: <1.2.3
Baidu/Umeditor
cpe:2.3:a:baidu:umeditor:1.2.3:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

github.com/fex-team/umeditor/issues/624nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.