CVE-2017-1002024: Kindsoft Kind Editor

Medium severity, CVSS 4.3. EPSS: 1.3% chance of exploitation in the next 30 days.

Vulnerability in web application Kind Editor v4.1.12, kindeditor/php/upload_json.php does not check authentication before allow users to upload files.

Affected products

• Kindsoft Kind Editor: up to and including 3.5.6; version 4.0 only; version 4.0.1 only; version 4.0.2 only; version 4.0.3 only; version 4.0.4 only; …
• Kindsoft Kindeditor: version 4.1.12 only

Published 2017-09-14. Last modified 2026-06-17.