CVE-2021-42227: Kindsoft Kindeditor

Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days.

Cross SIte Scripting (XSS) vulnerability exists in KindEditor 4.1.x via a Google search inurl:/examples/uploadbutton.html and then the .html file on the website that uses this editor (the file suffix is allowed).

Affected products

• Kindsoft Kindeditor: from 4.1, up to and including 4.1.12

Published 2021-10-14. Last modified 2026-06-17.