Umeditor Project Umeditor — known CVE vulnerabilities

Every CVE whose affected-product data names Umeditor Project Umeditor, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2024-53387 — CVSS 8.8 (high): A DOM Clobbering vulnerability in umeditor v1.2.3 allows attackers to execute arbitrary code via supplying a crafted HTML element.