Lucene search
+L

111 matches found

OSV
OSV
•added 2022/09/25 12:00 a.m.•39 views

GHSA-42HX-VRXX-5R6V Jodit Editor vulnerable to Cross-site Scripting

Jodit Editor is a WYSIWYG editor written in pure TypeScript without the use of additional libraries. Jodit Editor is vulnerable to XSS attacks when pasting specially constructed input. This issue has not been fully patched. There are no known workarounds...

6.1CVSS5.5AI score0.00619EPSS
SaveExploits1References3
NVD
NVD
•added 2022/09/24 3:15 a.m.•51 views

CVE-2022-23461

Jodit Editor is a WYSIWYG editor written in pure TypeScript without the use of additional libraries. Jodit Editor is vulnerable to XSS attacks when pasting specially constructed input. This issue has not been fully patched. There are no known workarounds...

6.1CVSS0.00619EPSS
SaveExploits1References1
Prion
Prion
•added 2022/09/24 3:15 a.m.•26 views

Design/Logic Flaw

Jodit Editor is a WYSIWYG editor written in pure TypeScript without the use of additional libraries. Jodit Editor is vulnerable to XSS attacks when pasting specially constructed input. This issue has not been fully patched. There are no known workarounds...

5.8CVSS5.9AI score0.00619EPSS
SaveExploits1References1Affected Software1
Mend
Mend
•added 2022/09/24 3:05 a.m.•1 views

CVE-2022-23461

Jodit Editor is a WYSIWYG editor written in pure TypeScript without the use of additional libraries. Jodit Editor is vulnerable to XSS attacks when pasting specially constructed input. This issue has not been fully patched. There are no known workarounds...

6.1CVSS0.00619EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2022/09/24 3:05 a.m.•11 views

CVE-2022-23461 Cross-Site Scripting (XSS) in Jodit Editor

Jodit Editor is a WYSIWYG editor written in pure TypeScript without the use of additional libraries. Jodit Editor is vulnerable to XSS attacks when pasting specially constructed input. This issue has not been fully patched. There are no known workarounds...

5.4CVSS6.1AI score0.00619EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2022/09/24 3:05 a.m.•54 views

CVE-2022-23461 Cross-Site Scripting (XSS) in Jodit Editor

Jodit Editor is a WYSIWYG editor written in pure TypeScript without the use of additional libraries. Jodit Editor is vulnerable to XSS attacks when pasting specially constructed input. This issue has not been fully patched. There are no known workarounds...

5.4CVSS6.1AI score0.00619EPSS
SaveExploits1References1
CVE
CVE
•added 2022/09/24 3:05 a.m.•102 views

CVE-2022-23461

CVE-2022-23461 affects Jodit Editor, a TypeScript-based WYSIWYG editor. The vulnerability is an XSS flaw triggered by pasting specially constructed input, with current sources noting that the issue has not been fully patched and that there are no known workarounds. Public references (NVD/Red Hat ...

6.1CVSS5.6AI score0.00619EPSS
SaveExploits1References1Affected Software1
OSV
OSV
•added 2022/09/24 3:05 a.m.•35 views

CVE-2022-23461 Cross-Site Scripting (XSS) in Jodit Editor

Jodit Editor is a WYSIWYG editor written in pure TypeScript without the use of additional libraries. Jodit Editor is vulnerable to XSS attacks when pasting specially constructed input. This issue has not been fully patched. There are no known workarounds...

5.4CVSS5.9AI score
SaveExploits0References3
CNNVD
CNNVD
•added 2022/09/24 12:00 a.m.•15 views

Jodit Editor 跨站脚本漏洞

A cross-site scripting vulnerability exists in Jodit Editor 3.0.0 and later, and 3.20.4 and earlier, due to a lack of effective filtering and escaping of user-supplied data when pasting specially constructed input. An attacker could use this vulnerability to launch a cross-site scripting attack...

6.1CVSS6.1AI score0.00619EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/09/24 12:00 a.m.•1 views

PT-2022-16003

Name of the Vulnerable Software and Affected Versions Jodit Editor affected versions not specified Description Jodit Editor is a WYSIWYG editor written in pure TypeScript without the use of additional libraries. It is vulnerable to XSS attacks when pasting specially constructed input. This issue...

6.1CVSS0.00619EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/24 12:00 a.m.•5 views

CVE-2022-23461: Improper Neutralization of Input During Web Page Generation

Jodit Editor is a WYSIWYG editor written in pure TypeScript without the use of additional libraries. Jodit Editor is vulnerable to XSS attacks when pasting specially constructed input. This issue has not been fully patched. There are no known workarounds...

6.1CVSS6.3AI score0.00619EPSS
SaveExploits1References2
Rows per page
Query Builder