Cross-Site Scripting (XSS)

jsoneditor is vulnerable to cross-site scripting XSS. An attacker is able to inject and execute arbitrary Javascript in tree mode...