VYPR

Kindeditor

by Kindeditor

CVEs (1)

  • CVE-2018-18950HigNov 5, 2018
    risk 0.49cvss 7.5epss 0.02

    KindEditor through 4.1.11 has a path traversal vulnerability in php/upload_json.php. Anyone can browse a file or directory in the kindeditor/attached/ folder via the path parameter without authentication.