<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: simple editor</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2023-40516: LG Simple Editor Incorrect Permission Assignment Local Privilege Escalation Vulnerability</title><link>https://patchthecve.com/cve/CVE-2023-40516.html</link><guid>https://patchthecve.com/cve/CVE-2023-40516.html</guid><pubDate>Wed, 17 Jun 2026 06:18:17 +0000</pubDate><description>HIGH 7.8: LG Simple Editor Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of LG Simple Editor. An attacker must first obtain the ability to execute low-privileged code on the target system in </description></item><item><title>CVE-2023-40515: LG Simple Editor joinAddUser Improper Input Validation Denial-of-Service Vulnerability</title><link>https://patchthecve.com/cve/CVE-2023-40515.html</link><guid>https://patchthecve.com/cve/CVE-2023-40515.html</guid><pubDate>Wed, 17 Jun 2026 06:18:16 +0000</pubDate><description>HIGH 7.5: LG Simple Editor joinAddUser Improper Input Validation Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability.

The specific flaw e</description></item><item><title>CVE-2023-40514: LG Simple Editor FileManagerController getImageByFilename Directory Traversal Information Disclosure Vulnerabi</title><link>https://patchthecve.com/cve/CVE-2023-40514.html</link><guid>https://patchthecve.com/cve/CVE-2023-40514.html</guid><pubDate>Wed, 17 Jun 2026 06:18:16 +0000</pubDate><description>MEDIUM 6.5: LG Simple Editor FileManagerController getImageByFilename Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Although authentication is required to exploit this vulnerab</description></item><item><title>CVE-2023-40513: LG Simple Editor UserManageController getImageByFilename Directory Traversal Information Disclosure Vulnerabil</title><link>https://patchthecve.com/cve/CVE-2023-40513.html</link><guid>https://patchthecve.com/cve/CVE-2023-40513.html</guid><pubDate>Wed, 17 Jun 2026 06:18:15 +0000</pubDate><description>MEDIUM 6.5: LG Simple Editor UserManageController getImageByFilename Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Although authentication is required to exploit this vulnerabi</description></item><item><title>CVE-2023-40512: LG Simple Editor PlayerController getImageByFilename Directory Traversal Information Disclosure Vulnerability</title><link>https://patchthecve.com/cve/CVE-2023-40512.html</link><guid>https://patchthecve.com/cve/CVE-2023-40512.html</guid><pubDate>Wed, 17 Jun 2026 06:18:15 +0000</pubDate><description>MEDIUM 6.5: LG Simple Editor PlayerController getImageByFilename Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Although authentication is required to exploit this vulnerability</description></item><item><title>CVE-2023-40511: LG Simple Editor checkServer Authentication Bypass Vulnerability</title><link>https://patchthecve.com/cve/CVE-2023-40511.html</link><guid>https://patchthecve.com/cve/CVE-2023-40511.html</guid><pubDate>Wed, 17 Jun 2026 06:18:15 +0000</pubDate><description>HIGH 7.5: LG Simple Editor checkServer Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the checkServer method. </description></item><item><title>CVE-2023-40510: LG Simple Editor getServerSetting Authentication Bypass Vulnerability</title><link>https://patchthecve.com/cve/CVE-2023-40510.html</link><guid>https://patchthecve.com/cve/CVE-2023-40510.html</guid><pubDate>Wed, 17 Jun 2026 06:18:14 +0000</pubDate><description>HIGH 7.5: LG Simple Editor getServerSetting Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the getServerSettin</description></item><item><title>CVE-2023-40509: LG Simple Editor deleteCanvas Directory Traversal Arbitrary File Deletion Vulnerability</title><link>https://patchthecve.com/cve/CVE-2023-40509.html</link><guid>https://patchthecve.com/cve/CVE-2023-40509.html</guid><pubDate>Wed, 17 Jun 2026 06:18:14 +0000</pubDate><description>CRITICAL 9.1: LG Simple Editor deleteCanvas Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability.

The specific flaw exists within </description></item><item><title>CVE-2023-40508: LG Simple Editor putCanvasDB Directory Traversal Arbitrary File Deletion Vulnerability</title><link>https://patchthecve.com/cve/CVE-2023-40508.html</link><guid>https://patchthecve.com/cve/CVE-2023-40508.html</guid><pubDate>Wed, 17 Jun 2026 06:18:14 +0000</pubDate><description>CRITICAL 9.1: LG Simple Editor putCanvasDB Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability.

The specific flaw exists within t</description></item><item><title>CVE-2023-40507: LG Simple Editor copyContent XML External Entity Processing Information Disclosure Vulnerability</title><link>https://patchthecve.com/cve/CVE-2023-40507.html</link><guid>https://patchthecve.com/cve/CVE-2023-40507.html</guid><pubDate>Wed, 17 Jun 2026 06:18:13 +0000</pubDate><description>HIGH 7.5: LG Simple Editor copyContent XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability.

The specific fl</description></item><item><title>CVE-2023-40506: LG Simple Editor copyContent XML External Entity Processing Information Disclosure Vulnerability</title><link>https://patchthecve.com/cve/CVE-2023-40506.html</link><guid>https://patchthecve.com/cve/CVE-2023-40506.html</guid><pubDate>Wed, 17 Jun 2026 06:18:13 +0000</pubDate><description>HIGH 7.5: LG Simple Editor copyContent XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability.

The specific fl</description></item><item><title>CVE-2023-40505: LG Simple Editor createThumbnailByMovie Command Injection Remote Code Execution Vulnerability</title><link>https://patchthecve.com/cve/CVE-2023-40505.html</link><guid>https://patchthecve.com/cve/CVE-2023-40505.html</guid><pubDate>Wed, 17 Jun 2026 06:18:13 +0000</pubDate><description>CRITICAL 9.8: LG Simple Editor createThumbnailByMovie Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability.

The specific flaw exists w</description></item><item><title>CVE-2023-40504: LG Simple Editor readVideoInfo Command Injection Remote Code Execution Vulnerability</title><link>https://patchthecve.com/cve/CVE-2023-40504.html</link><guid>https://patchthecve.com/cve/CVE-2023-40504.html</guid><pubDate>Wed, 17 Jun 2026 06:18:12 +0000</pubDate><description>CRITICAL 9.8: LG Simple Editor readVideoInfo Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the</description></item><item><title>CVE-2023-40503: LG Simple Editor saveXmlFile XML External Entity Processing Information Disclosure Vulnerability</title><link>https://patchthecve.com/cve/CVE-2023-40503.html</link><guid>https://patchthecve.com/cve/CVE-2023-40503.html</guid><pubDate>Wed, 17 Jun 2026 06:18:12 +0000</pubDate><description>HIGH 7.5: LG Simple Editor saveXmlFile XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability.

The specific fl</description></item><item><title>CVE-2023-40502: LG Simple Editor cropImage Directory Traversal Arbitrary File Deletion Vulnerability</title><link>https://patchthecve.com/cve/CVE-2023-40502.html</link><guid>https://patchthecve.com/cve/CVE-2023-40502.html</guid><pubDate>Wed, 17 Jun 2026 06:18:11 +0000</pubDate><description>CRITICAL 9.1: LG Simple Editor cropImage Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the</description></item><item><title>CVE-2023-40501: LG Simple Editor copyContent Exposed Dangerous Function Remote Code Execution Vulnerability</title><link>https://patchthecve.com/cve/CVE-2023-40501.html</link><guid>https://patchthecve.com/cve/CVE-2023-40501.html</guid><pubDate>Wed, 17 Jun 2026 06:18:11 +0000</pubDate><description>CRITICAL 9.8: LG Simple Editor copyContent Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability.

The specific flaw exists wit</description></item><item><title>CVE-2023-40500: LG Simple Editor copyContent Exposed Dangerous Function Remote Code Execution Vulnerability</title><link>https://patchthecve.com/cve/CVE-2023-40500.html</link><guid>https://patchthecve.com/cve/CVE-2023-40500.html</guid><pubDate>Wed, 17 Jun 2026 06:18:11 +0000</pubDate><description>CRITICAL 9.8: LG Simple Editor copyContent Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability.

The specific flaw exists wit</description></item><item><title>CVE-2023-40499: LG Simple Editor mkdir Directory Traversal Arbitrary File Deletion Vulnerability</title><link>https://patchthecve.com/cve/CVE-2023-40499.html</link><guid>https://patchthecve.com/cve/CVE-2023-40499.html</guid><pubDate>Wed, 17 Jun 2026 06:18:10 +0000</pubDate><description>CRITICAL 9.1: LG Simple Editor mkdir Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the mkd</description></item><item><title>CVE-2023-40498: LG Simple Editor cp Command Directory Traversal Remote Code Execution Vulnerability</title><link>https://patchthecve.com/cve/CVE-2023-40498.html</link><guid>https://patchthecve.com/cve/CVE-2023-40498.html</guid><pubDate>Wed, 17 Jun 2026 06:18:10 +0000</pubDate><description>CRITICAL 9.8: LG Simple Editor cp Command Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the </description></item><item><title>CVE-2023-40497: LG Simple Editor saveXml Directory Traversal Remote Code Execution Vulnerability</title><link>https://patchthecve.com/cve/CVE-2023-40497.html</link><guid>https://patchthecve.com/cve/CVE-2023-40497.html</guid><pubDate>Wed, 17 Jun 2026 06:18:10 +0000</pubDate><description>CRITICAL 9.8: LG Simple Editor saveXml Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the sav</description></item><item><title>CVE-2023-40496: LG Simple Editor copyStickerContent Directory Traversal Information Disclosure Vulnerability</title><link>https://patchthecve.com/cve/CVE-2023-40496.html</link><guid>https://patchthecve.com/cve/CVE-2023-40496.html</guid><pubDate>Wed, 17 Jun 2026 06:18:09 +0000</pubDate><description>HIGH 7.5: LG Simple Editor copyStickerContent Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability.

The specific flaw e</description></item><item><title>CVE-2023-40495: LG Simple Editor copyTemplateAll Directory Traversal Information Disclosure Vulnerability</title><link>https://patchthecve.com/cve/CVE-2023-40495.html</link><guid>https://patchthecve.com/cve/CVE-2023-40495.html</guid><pubDate>Wed, 17 Jun 2026 06:18:09 +0000</pubDate><description>HIGH 7.5: LG Simple Editor copyTemplateAll Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability.

The specific flaw exis</description></item><item><title>CVE-2023-40494: LG Simple Editor deleteFolder Directory Traversal Arbitrary File Deletion Vulnerability</title><link>https://patchthecve.com/cve/CVE-2023-40494.html</link><guid>https://patchthecve.com/cve/CVE-2023-40494.html</guid><pubDate>Wed, 17 Jun 2026 06:18:08 +0000</pubDate><description>CRITICAL 9.1: LG Simple Editor deleteFolder Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability.

The specific flaw exists within </description></item><item><title>CVE-2023-40493: LG Simple Editor copySessionFolder Directory Traversal Remote Code Execution Vulnerability</title><link>https://patchthecve.com/cve/CVE-2023-40493.html</link><guid>https://patchthecve.com/cve/CVE-2023-40493.html</guid><pubDate>Wed, 17 Jun 2026 06:18:08 +0000</pubDate><description>CRITICAL 9.8: LG Simple Editor copySessionFolder Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability.

The specific flaw exists with</description></item><item><title>CVE-2023-40492: LG Simple Editor deleteCheckSession Directory Traversal Arbitrary File Deletion Vulnerability</title><link>https://patchthecve.com/cve/CVE-2023-40492.html</link><guid>https://patchthecve.com/cve/CVE-2023-40492.html</guid><pubDate>Wed, 17 Jun 2026 06:18:08 +0000</pubDate><description>CRITICAL 9.1: LG Simple Editor deleteCheckSession Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability.

The specific flaw exists w</description></item></channel></rss>