Lucene search
+L

108 matches found

NVD
NVD
•added 2022/09/24 3:15 a.m.•51 views

CVE-2022-23461

Jodit Editor is a WYSIWYG editor written in pure TypeScript without the use of additional libraries. Jodit Editor is vulnerable to XSS attacks when pasting specially constructed input. This issue has not been fully patched. There are no known workarounds...

6.1CVSS0.00619EPSS
SaveExploits1References1
Prion
Prion
•added 2022/09/24 3:15 a.m.•26 views

Design/Logic Flaw

Jodit Editor is a WYSIWYG editor written in pure TypeScript without the use of additional libraries. Jodit Editor is vulnerable to XSS attacks when pasting specially constructed input. This issue has not been fully patched. There are no known workarounds...

5.8CVSS5.9AI score0.00619EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
•added 2022/09/24 3:05 a.m.•11 views

CVE-2022-23461 Cross-Site Scripting (XSS) in Jodit Editor

Jodit Editor is a WYSIWYG editor written in pure TypeScript without the use of additional libraries. Jodit Editor is vulnerable to XSS attacks when pasting specially constructed input. This issue has not been fully patched. There are no known workarounds...

5.4CVSS6.1AI score0.00619EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2022/09/24 3:05 a.m.•53 views

CVE-2022-23461 Cross-Site Scripting (XSS) in Jodit Editor

Jodit Editor is a WYSIWYG editor written in pure TypeScript without the use of additional libraries. Jodit Editor is vulnerable to XSS attacks when pasting specially constructed input. This issue has not been fully patched. There are no known workarounds...

5.4CVSS6.1AI score0.00619EPSS
SaveExploits1References1
OSV
OSV
•added 2022/09/24 3:05 a.m.•34 views

CVE-2022-23461 Cross-Site Scripting (XSS) in Jodit Editor

Jodit Editor is a WYSIWYG editor written in pure TypeScript without the use of additional libraries. Jodit Editor is vulnerable to XSS attacks when pasting specially constructed input. This issue has not been fully patched. There are no known workarounds...

5.4CVSS5.9AI score
SaveExploits0References3
CVE
CVE
•added 2022/09/24 3:05 a.m.•101 views

CVE-2022-23461

CVE-2022-23461 affects Jodit Editor, a TypeScript-based WYSIWYG editor. The vulnerability is an XSS flaw triggered by pasting specially constructed input, with current sources noting that the issue has not been fully patched and that there are no known workarounds. Public references (NVD/Red Hat ...

6.1CVSS5.6AI score0.00619EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/24 12:00 a.m.•3 views

CVE-2022-23461: Improper Neutralization of Input During Web Page Generation

Jodit Editor is a WYSIWYG editor written in pure TypeScript without the use of additional libraries. Jodit Editor is vulnerable to XSS attacks when pasting specially constructed input. This issue has not been fully patched. There are no known workarounds...

6.1CVSS6.3AI score0.00619EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/09/24 12:00 a.m.•12 views

Jodit Editor 跨站脚本漏洞

A cross-site scripting vulnerability exists in Jodit Editor 3.0.0 and later, and 3.20.4 and earlier, due to a lack of effective filtering and escaping of user-supplied data when pasting specially constructed input. An attacker could use this vulnerability to launch a cross-site scripting attack...

6.1CVSS6.1AI score0.00619EPSS
SaveExploits1References2
Rows per page
Query Builder