Launchpad.net

CVE 2019-7543

In KindEditor 4.1.11, the php/demo.php content1 parameter has a reflected Cross-site Scripting (XSS) vulnerability.

See the CVE page on Mitre.org for more details.

References