EIP-2026-109011

The exploit demonstrates a file upload vulnerability in KindEditor 4.1.5, allowing arbitrary file uploads via a crafted POST request to the upload_json.php endpoint. The provided PHP script and HTML/JavaScript example show how to bypass insufficient input sanitization to upload malicious files.