Skip to content

CVE record · 1 source

CVE-2026-124491

CVSS 6.4

SunEditor before 3.4.0 contains a stored cross-site scripting vulnerability in the FileUpload plugin create() method that assigns server-returned…

Vendor: JiHong88
Product: suneditor
CVSS v3.1: 6.4 AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Weakness: CWE-79

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

18

CVE NVD 3h ago

SunEditor before 3.4.0 contains a stored cross-site scripting vulnerability in the FileUpload plugin create() method that assigns server-returned…

SunEditor before 3.4.0 contains a stored cross-site scripting vulnerability in the FileUpload plugin create() method that assigns server-returned file names to innerHTML without escaping. Attackers can upload files with…

CVSS 6.4 CVE-2026-124491 JiHong88