VULNERABILITY INTELLIGENCE

CVE-2021-37271

CVSS score5.4 MEDIUM

EPSS probability0.56%

CISA KEVNot currently listed

Published2021-09-28

Last modified2026-06-17

Description

Cross Site Scripting (XSS) vulnerability exists in UEditor v1.4.3.3, which can be exploited by an attacker to obtain user cookie information.