CVE-2021-37271

5.4 mediumEPSS 0.6%

Medium (5.4) in baidu ueditor. EPSS 0.6% chance of exploitation in the next 30 days.

Cross Site Scripting (XSS) vulnerability exists in UEditor v1.4.3.3, which can be exploited by an attacker to obtain user cookie information.

Severity

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 46% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2021-09-28
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19