VYPR
Vendor

Kindeditor

Products
1
CVEs
1
Across products
1
Status
Private

Products

1

Recent CVEs

1
  • CVE-2018-18950HigNov 5, 2018
    risk 0.49cvss 7.5epss 0.02

    KindEditor through 4.1.11 has a path traversal vulnerability in php/upload_json.php. Anyone can browse a file or directory in the kindeditor/attached/ folder via the path parameter without authentication.