CVE-2021-30086: Kindsoft Kindeditor

Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days.

Cross Site Scripting (XSS) vulnerability exists in KindEditor (Chinese versions) 4.1.12, which can be exploited by an attacker to obtain user cookie information.

Affected products

• Kindsoft Kindeditor: version 4.1.12 only

Published 2021-09-28. Last modified 2026-06-17.