Vulnerabilities (CVE)

Filtered by vendor Baidu Subscribe
Filtered by product Ueditor
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-37271 1 Baidu 1 Ueditor 2023-12-10 3.5 LOW 5.4 MEDIUM
Cross Site Scripting (XSS) vulnerability exists in UEditor v1.4.3.3, which can be exploited by an attacker to obtain user cookie information.
CVE-2017-14744 1 Baidu 1 Ueditor 2023-12-10 4.3 MEDIUM 6.1 MEDIUM
UEditor 1.4.3.3 has XSS via the SRC attribute of an IFRAME element.