Vulnerability · Published Apr 23, 2025 · Assigned by drupal
CVE-2025-3903UEditor - 百度编辑器 - Critical - Unsupported - SA-CONTRIB-2025-044
High 7.3
In plain English
A high-severity security flaw in UEditor - 百度编辑器 from Drupal. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 34% of all known vulnerabilities).
Severity (CVSS 3.1)7.3High
Exploit odds (30 days)0.4%top 66.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Vulnerability in Drupal UEditor - 百度编辑器.This issue affects UEditor - 百度编辑器: *.*.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Packagist:https://packages.drupal.org/8 | drupal/ueditor | no fix listed | DRUPAL-CONTRIB-2025-044 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Drupal | UEditor - 百度编辑器 | *.* |