Cross Site Scripting (XSS) vulnerability exists in UEditor v1.4.3.3, which can be exploited by an attacker to obtain user cookie information.Referenceshttps://www.cnvd.org.cn/flaw/show/3243916https://www.freebuf.com/vuls/269956.html
