CVE-2021-37271: Baidu Ueditor

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

Cross Site Scripting (XSS) vulnerability exists in UEditor v1.4.3.3, which can be exploited by an attacker to obtain user cookie information.

Affected products

• Baidu Ueditor: version 1.4.3.3 only

Published 2021-09-28. Last modified 2026-06-17.