Lucene search
K

23 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 9:14 a.m.5 views

CVE-2022-23461

Jodit Editor is a WYSIWYG editor written in pure TypeScript without the use of additional libraries. Jodit Editor is vulnerable to XSS attacks when pasting specially constructed input. This issue has not been fully patched. There are no known workarounds...

6.1CVSS5.9AI score0.00106EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-2474

Malicious code in bioql PyPI...

6.1CVSS6.2AI score0.00136EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2022-6682

Malicious code in bioql PyPI...

6.1CVSS6.2AI score0.00106EPSS
Exploits1References4
RedhatCVE
RedhatCVE
added 2025/05/23 4:19 a.m.5 views

CVE-2023-42399

Cross Site Scripting vulnerability in xdsoft.net Jodit Editor v.4.0.0-beta.86 allows a remote attacker to obtain sensitive information via the rich text editor component...

6.1CVSS6AI score0.00136EPSS
Exploits0
Github Security Blog
Github Security Blog
added 2023/09/19 6:30 a.m.28 views

Jodit Editor vulnerable to cross-site scripting

Cross Site Scripting vulnerability in xdsoft.net Jodit Editor v.4.0.0-beta.86 allows a remote attacker to obtain sensitive information via the rich text editor component...

6.1CVSS6.1AI score0.00136EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2023/09/19 6:30 a.m.17 views

GHSA-95XR-CQ6H-VWR3 Jodit Editor vulnerable to cross-site scripting

Cross Site Scripting vulnerability in xdsoft.net Jodit Editor v.4.0.0-beta.86 allows a remote attacker to obtain sensitive information via the rich text editor component...

6.1CVSS5.9AI score0.00136EPSS
Exploits0References3
OSV
OSV
added 2023/09/19 4:15 a.m.0 views

CVE-2023-42399

Cross Site Scripting vulnerability in xdsoft.net Jodit Editor v.4.0.0-beta.86 allows a remote attacker to obtain sensitive information via the rich text editor component...

6.1CVSS5.9AI score
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2023/09/19 4:15 a.m.0 views

CVE-2023-42399

Cross Site Scripting vulnerability in xdsoft.net Jodit Editor v.4.0.0-beta.86 allows a remote attacker to obtain sensitive information via the rich text editor component...

6.1CVSS6.4AI score0.00136EPSS
Exploits0References4
Cvelist
Cvelist
added 2023/09/19 12:0 a.m.9 views

CVE-2023-42399

Cross Site Scripting vulnerability in xdsoft.net Jodit Editor v.4.0.0-beta.86 allows a remote attacker to obtain sensitive information via the rich text editor component...

6.1AI score0.00136EPSS
Exploits0References3
CVE
CVE
added 2023/09/19 12:0 a.m.61 views

CVE-2023-42399

CVE-2023-42399 concerns the Jodit Editor (xdsoft.net) v4.0.0-beta.86, where a Cross‑Site Scripting flaw stems from improper sanitization in the rich text editor component. The vulnerability can allow a remote attacker to obtain sensitive information via the editor. Some connected sources (includi...

6.1CVSS5.9AI score0.00136EPSS
Exploits0References3Affected Software1
CNNVD
CNNVD
added 2023/09/19 12:0 a.m.2 views

Jodit Editor Cross-Site Scripting Vulnerability

Jodit Editor is an excellent WYSIWYG editor written in pure TypeScript by Valeriy Personal Developers. A cross-site scripting vulnerability exists in Jodit Editor version v.4.0.0-beta.86, which originates from a vulnerability that could allow a remote attacker to gain access to sensitive...

6.1CVSS6.2AI score0.00136EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2023/09/19 12:0 a.m.10 views

CVE-2023-42399

Cross Site Scripting vulnerability in xdsoft.net Jodit Editor v.4.0.0-beta.86 allows a remote attacker to obtain sensitive information via the rich text editor component...

6AI score0.00136EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2023/09/18 12:0 a.m.3 views

PT-2023-28329 · Unknown · Jodit Editor

Name of the Vulnerable Software and Affected Versions: Jodit Editor version 4.0.0-beta.86 Description: The issue allows a remote attacker to obtain sensitive information via the rich text editor component. This is due to a Cross Site Scripting vulnerability. Recommendations: For Jodit Editor...

6.1CVSS6AI score0.00136EPSS
Exploits0References10
CNVD
CNVD
added 2022/09/28 12:0 a.m.18 views

Jodit Editor Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability exists in Jodit Editor 3.0.0 and later, and 3.20.4 and earlier, due to a lack of effective filtering and escaping of user-supplied data when pasting specially constructed input. An attacker could use this vulnerability to launch a cross-site scripting attack...

6.1CVSS2.8AI score0.00106EPSS
Exploits1References1
OSV
OSV
added 2022/09/25 12:0 a.m.13 views

GHSA-42HX-VRXX-5R6V Jodit Editor vulnerable to Cross-site Scripting

Jodit Editor is a WYSIWYG editor written in pure TypeScript without the use of additional libraries. Jodit Editor is vulnerable to XSS attacks when pasting specially constructed input. This issue has not been fully patched. There are no known workarounds...

6.1CVSS5.5AI score0.00106EPSS
Exploits1References3
Github Security Blog
Github Security Blog
added 2022/09/25 12:0 a.m.27 views

Jodit Editor vulnerable to Cross-site Scripting

Jodit Editor is a WYSIWYG editor written in pure TypeScript without the use of additional libraries. Jodit Editor is vulnerable to XSS attacks when pasting specially constructed input. This issue has not been fully patched. There are no known workarounds...

6.1CVSS2.4AI score0.00106EPSS
Exploits1References3Affected Software1
NVD
NVD
added 2022/09/24 3:15 a.m.8 views

CVE-2022-23461

Jodit Editor is a WYSIWYG editor written in pure TypeScript without the use of additional libraries. Jodit Editor is vulnerable to XSS attacks when pasting specially constructed input. This issue has not been fully patched. There are no known workarounds...

6.1CVSS0.00106EPSS
Exploits1References1
Prion
Prion
added 2022/09/24 3:15 a.m.11 views

Design/Logic Flaw

Jodit Editor is a WYSIWYG editor written in pure TypeScript without the use of additional libraries. Jodit Editor is vulnerable to XSS attacks when pasting specially constructed input. This issue has not been fully patched. There are no known workarounds...

5.8CVSS5.9AI score0.00106EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2022/09/24 3:5 a.m.73 views

CVE-2022-23461

CVE-2022-23461 affects Jodit Editor, a TypeScript-based WYSIWYG editor. The vulnerability is an XSS flaw triggered by pasting specially constructed input, with current sources noting that the issue has not been fully patched and that there are no known workarounds. Public references (NVD/Red Hat ...

6.1CVSS5.6AI score0.00106EPSS
Exploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/09/24 3:5 a.m.5 views

CVE-2022-23461 Cross-Site Scripting (XSS) in Jodit Editor

Jodit Editor is a WYSIWYG editor written in pure TypeScript without the use of additional libraries. Jodit Editor is vulnerable to XSS attacks when pasting specially constructed input. This issue has not been fully patched. There are no known workarounds...

5.4CVSS6.1AI score0.00106EPSS
Exploits1References1
Rows per page
Query Builder