Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2022-23461

Cross-Site Scripting (XSS) in Jodit Editor

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
GitHub_M

Description

Jodit Editor is a WYSIWYG editor written in pure TypeScript without the use of additional libraries. Jodit Editor is vulnerable to XSS attacks when pasting specially constructed input. This issue has not been fully patched. There are no known workarounds.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

xdan Jodit Editor

  • 3.20.4 to ≤ 3.20.4affected

References