kindsoft records

7 published records for vendor kindsoft.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 1
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

7 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
35Monitor	CVE-2021-42228No exploit	A Cross Site Request Forgery (CSRF) vulnerability exists in KindEditor 4.1.x, as demonstrated by examples/uploadbutton.html.kindsoft · kindeditor · CWE-352 Pre-auth CSRF	High8.8	—	1.0%	Oct 14, 2021
25Monitor	CVE-2019-7543Proof of concept	In KindEditor 4.1.11, the php/demo.php content1 parameter has a reflected Cross-site Scripting (XSS) vulnerability.kindsoft · kindeditor · CWE-79 Pre-auth XSS	Medium6.1	—	3.2%	Feb 6, 2019
24Monitor	CVE-2021-42227No exploit	Cross SIte Scripting (XSS) vulnerability exists in KindEditor 4.1.x via a Google search inurl:/examples/uploadbutton.html and then the .htmlkindsoft · kindeditor · CWE-79 Pre-auth XSS	Medium6.1	—	0.9%	Oct 14, 2021
24Monitor	CVE-2021-30086No exploit	Cross Site Scripting (XSS) vulnerability exists in KindEditor (Chinese versions) 4.1.12, which can be exploited by an attacker to obtain usekindsoft · kindeditor · CWE-79 Pre-auth XSS	Medium6.1	—	0.7%	Sep 28, 2021
24Monitor	CVE-2021-37267No exploit	Cross Site Scripting (XSS) vulnerability exists in all versions of KindEditor, which can be exploited by an attacker to obtain user cookie ikindsoft · kindeditor · CWE-79 Pre-auth XSS	Medium6.1	—	0.6%	Sep 28, 2021
24Monitor	CVE-2020-28717No exploit	Cross Site Scripting (XSS) vulnerability in content1 parameter in demo.jsp in kindsoft kindeditor version 4.1.12, allows attackers to executkindsoft · kindeditor · CWE-79 pre-auth RCE XSS	Medium6.1	—	0.5%	Aug 11, 2023
17Monitor	CVE-2017-1002024No exploit	Vulnerability in web application Kind Editor v4.1.12, kindeditor/php/upload_json.php does not check authentication before allow users to uplkindsoft · kind editor · CWE-287 Auth bypass	Medium4.3	—	1.3%	Sep 14, 2017

CVE-2021-42228
35Monitor
A Cross Site Request Forgery (CSRF) vulnerability exists in KindEditor 4.1.x, as demonstrated by examples/uploadbutton.html.
HighCVSS 8.8No exploitEPSS 1%
- Pre-auth
- CSRF
kindsoft · kindeditorOct 14, 2021
CVE-2019-7543
25Monitor
In KindEditor 4.1.11, the php/demo.php content1 parameter has a reflected Cross-site Scripting (XSS) vulnerability.
MediumCVSS 6.1Proof of conceptEPSS 3%
- Pre-auth
- XSS
kindsoft · kindeditorFeb 6, 2019
CVE-2021-42227
24Monitor
Cross SIte Scripting (XSS) vulnerability exists in KindEditor 4.1.x via a Google search inurl:/examples/uploadbutton.html and then the .html
MediumCVSS 6.1No exploitEPSS 1%
- Pre-auth
- XSS
kindsoft · kindeditorOct 14, 2021
CVE-2021-30086
24Monitor
Cross Site Scripting (XSS) vulnerability exists in KindEditor (Chinese versions) 4.1.12, which can be exploited by an attacker to obtain use
MediumCVSS 6.1No exploitEPSS 1%
- Pre-auth
- XSS
kindsoft · kindeditorSep 28, 2021
CVE-2021-37267
24Monitor
Cross Site Scripting (XSS) vulnerability exists in all versions of KindEditor, which can be exploited by an attacker to obtain user cookie i
MediumCVSS 6.1No exploitEPSS 1%
- Pre-auth
- XSS
kindsoft · kindeditorSep 28, 2021
CVE-2020-28717
24Monitor
Cross Site Scripting (XSS) vulnerability in content1 parameter in demo.jsp in kindsoft kindeditor version 4.1.12, allows attackers to execut
MediumCVSS 6.1No exploitEPSS 1%
- pre-auth RCE
- XSS
kindsoft · kindeditorAug 11, 2023
CVE-2017-1002024
17Monitor
Vulnerability in web application Kind Editor v4.1.12, kindeditor/php/upload_json.php does not check authentication before allow users to upl
MediumCVSS 4.3No exploitEPSS 1%
- Auth bypass
kindsoft · kind editorSep 14, 2017