CVE-2023-42399

CVE-2023-42399 concerns the Jodit Editor (xdsoft.net) v4.0.0-beta.86, where a Cross‑Site Scripting flaw stems from improper sanitization in the rich text editor component. The vulnerability can allow a remote attacker to obtain sensitive information via the editor. Some connected sources (includi...

PT-2023-28329 · Unknown · Jodit Editor

Name of the Vulnerable Software and Affected Versions: Jodit Editor version 4.0.0-beta.86 Description: The issue allows a remote attacker to obtain sensitive information via the rich text editor component. This is due to a Cross Site Scripting vulnerability. Recommendations: For Jodit Editor...

Jodit Editor Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability exists in Jodit Editor 3.0.0 and later, and 3.20.4 and earlier, due to a lack of effective filtering and escaping of user-supplied data when pasting specially constructed input. An attacker could use this vulnerability to launch a cross-site scripting attack...

Cross-site Scripting (XSS)

jodit is vulnerable to cross-site scripting. The library does not properly escape specially constructed input through stripTags when a user copy-pastes content from a page controlled by the attacker, which allows malicious javascript execution on victim's browser...

GHSA-42HX-VRXX-5R6V Jodit Editor vulnerable to Cross-site Scripting

Jodit Editor is a WYSIWYG editor written in pure TypeScript without the use of additional libraries. Jodit Editor is vulnerable to XSS attacks when pasting specially constructed input. This issue has not been fully patched. There are no known workarounds...

Jodit Editor vulnerable to Cross-site Scripting

Jodit Editor is a WYSIWYG editor written in pure TypeScript without the use of additional libraries. Jodit Editor is vulnerable to XSS attacks when pasting specially constructed input. This issue has not been fully patched. There are no known workarounds...

CVE-2022-23461

Jodit Editor is a WYSIWYG editor written in pure TypeScript without the use of additional libraries. Jodit Editor is vulnerable to XSS attacks when pasting specially constructed input. This issue has not been fully patched. There are no known workarounds...

Design/Logic Flaw

Jodit Editor is a WYSIWYG editor written in pure TypeScript without the use of additional libraries. Jodit Editor is vulnerable to XSS attacks when pasting specially constructed input. This issue has not been fully patched. There are no known workarounds...

CVE-2022-23461 Cross-Site Scripting (XSS) in Jodit Editor

Jodit Editor is a WYSIWYG editor written in pure TypeScript without the use of additional libraries. Jodit Editor is vulnerable to XSS attacks when pasting specially constructed input. This issue has not been fully patched. There are no known workarounds...

CVE-2022-23461 Cross-Site Scripting (XSS) in Jodit Editor

Jodit Editor is a WYSIWYG editor written in pure TypeScript without the use of additional libraries. Jodit Editor is vulnerable to XSS attacks when pasting specially constructed input. This issue has not been fully patched. There are no known workarounds...

CVE-2022-23461 Cross-Site Scripting (XSS) in Jodit Editor

Jodit Editor is a WYSIWYG editor written in pure TypeScript without the use of additional libraries. Jodit Editor is vulnerable to XSS attacks when pasting specially constructed input. This issue has not been fully patched. There are no known workarounds...

CVE-2022-23461

CVE-2022-23461 affects Jodit Editor, a TypeScript-based WYSIWYG editor. The vulnerability is an XSS flaw triggered by pasting specially constructed input, with current sources noting that the issue has not been fully patched and that there are no known workarounds. Public references (NVD/Red Hat ...

Jodit Editor 跨站脚本漏洞

A cross-site scripting vulnerability exists in Jodit Editor 3.0.0 and later, and 3.20.4 and earlier, due to a lack of effective filtering and escaping of user-supplied data when pasting specially constructed input. An attacker could use this vulnerability to launch a cross-site scripting attack...