Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-23474
HistoryDec 15, 2022 - 7:15 p.m.

Code injection

2022-12-1519:15:00
PRIOn knowledge base
www.prio-n.com
1
editor.js
code injection
vulnerability
patched
nvd

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.4%

Editor.js is a block-style editor with clean JSON output. Versions prior to 2.26.0 are vulnerable to Code Injection via pasted input. The processHTML method passes pasted input into wrapper’s innerHTML. This issue is patched in version 2.26.0.

CPENameOperatorVersion
editor.jslt2.26.0

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.4%

Related for PRION:CVE-2022-23474