CVE-2021-42228: Kindsoft Kindeditor

High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days.

A Cross Site Request Forgery (CSRF) vulnerability exists in KindEditor 4.1.x, as demonstrated by examples/uploadbutton.html.

Affected products

• Kindsoft Kindeditor: from 4.1, up to and including 4.1.12

Published 2021-10-14. Last modified 2026-06-17.