CVE-2019-7543
MEDIUM NUCLEIKindEditor 4.1.11 - Reflected Cross-Site Scripting via PHP Demo Content Parameter
Title source: llmExploitation Summary
CVE-2019-7543 has a Nuclei detection template available — see the Nuclei card below for the Shodan/FOFA recon queries.
Description
In KindEditor 4.1.11, the php/demo.php content1 parameter has a reflected Cross-site Scripting (XSS) vulnerability.
Nuclei Templates (1)
KindEditor 4.1.11 - Cross-Site Scripting
MEDIUMby pikpikcu
References (1)
Core 1
Core References
Exploit, Third Party Advisory x_refsource_misc
https://github.com/0xUhaw/CVE-Bins/tree/master/KindEditor
Scores
CVSS v3
6.1
EPSS
0.0313
EPSS Percentile
86.2%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Details
CWE
CWE-79
Status
published
Products (1)
kindsoft/kindeditor
4.1.11
Published
Feb 06, 2019
Tracked Since
Feb 18, 2026