CVE-2020-28717: Kindsoft Kindeditor

Medium severity, CVSS 6.1. EPSS: 0.5% chance of exploitation in the next 30 days.

Cross Site Scripting (XSS) vulnerability in content1 parameter in demo.jsp in kindsoft kindeditor version 4.1.12, allows attackers to execute arbitrary code.

Affected products

• Kindsoft Kindeditor: version 4.1.12 only

Published 2023-08-11. Last modified 2026-06-17.