CVE-2026-124491 | JiHong88 SunEditor up to 3.3.x FileUpload create cross site scripting

November 8, 2026 Yanac

A vulnerability identified as problematic has been detected in JiHong88 SunEditor up to 3.3.x. This vulnerability affects the function create of the component FileUpload. The manipulation leads to cross site scripting.

This vulnerability is referenced as CVE-2026-124491. Remote exploitation of the attack is possible. No exploit is available.

You should upgrade the affected component.VulDB Recent EntriesRead More