← Back

Kindeditor

kindeditor

Vendor: Kindeditor • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-18950
1Kindeditor
1Kindeditor
Nov 21, 2024
Nov 5, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
KindEditor through 4.1.11 has a path traversal vulnerability in php/upload_json.php. Anyone can browse a file or directory in the kindeditor/attached/ folder via the path parameter without authentication.