https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-3903.htmlhttps://patchthecve.com/cve/CVE-2025-3903.htmlThu, 01 Oct 2026 15:10:00 +0000HIGH 7.3: Vulnerability in Drupal UEditor - 百度编辑器.This issue affects UEditor - 百度编辑器: *.*.https://patchthecve.com/cve/CVE-2024-7343.htmlhttps://patchthecve.com/cve/CVE-2024-7343.htmlWed, 17 Jun 2026 08:19:54 +0000LOW 3.5: A vulnerability was found in Baidu UEditor 1.4.2. It has been declared as problematic. This vulnerability affects unknown code of the file /ueditor142/php/controller.php?action=catchimage. The manipulation of the argument source[] leads to cross site scripting. The attack can be initiated remotely. https://patchthecve.com/cve/CVE-2024-7342.htmlhttps://patchthecve.com/cve/CVE-2024-7342.htmlWed, 17 Jun 2026 08:19:54 +0000LOW 3.5: A vulnerability was found in Baidu UEditor 1.4.3.3. It has been classified as problematic. This affects an unknown part of the file /ueditor/php/controller.php?action=uploadfile&encode=utf-8. The manipulation of the argument upfile leads to unrestricted upload. It is possible to initiate the attack