Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Baidu Subscribe
Filtered by product Ueditor
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-37271 1 Baidu 1 Ueditor 2021-10-01 3.5 LOW 5.4 MEDIUM
Cross Site Scripting (XSS) vulnerability exists in UEditor v1.4.3.3, which can be exploited by an attacker to obtain user cookie information.
CVE-2017-14744 1 Baidu 1 Ueditor 2017-10-06 4.3 MEDIUM 6.1 MEDIUM
UEditor 1.4.3.3 has XSS via the SRC attribute of an IFRAME element.