cutesoft components vulnerabilities

Products

• cute editor 1
• cute editor for asp.net 1

Latest cutesoft components CVEs

Newest publication first

1. CVE-2012-2985 Cross-site scripting (XSS) vulnerability in InsertDocument.aspx in CuteSoft Cute Editor 6.4 allows remote authenticated users to inject arbitrary web script or HTML via the _UploadID parameter.

   Published 2012-08-21

   Low·CVSS 3.5 EPSS 0.83%

   Cross-site scripting (XSS) vulnerability in InsertDocument.aspx in CuteSoft Cute Editor 6.4 allows remote authenticated users to inject arbitrary web script or HTML via the _UploadID parameter.

2. CVE-2009-4665 CuteSoft CuteEditor Path Traversal vulnerability

   Published 2010-03-05

   Medium·CVSS 5.0 EPSS 6.7% Public exploit

   Directory traversal vulnerability in CuteSoft_Client/CuteEditor/Load.ashx in CuteSoft Components Cute Editor for ASP.NET allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.