Lucene search
Veracode Vulnerability DatabaseVERACODE:37305HistorySep 27, 2022 - 8:58 p.m.
Cross-site Scripting (XSS)
2022-09-2720:58:01
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.001 Low
EPSS
Percentile
34.2%
jodit is vulnerable to cross-site scripting. The library does not properly escape specially constructed input through stripTags when a user copy-pastes content from a page controlled by the attacker, which allows malicious javascript execution on victim’s browser.
Related
cve
cve
CVE-2022-23461
2022-09-24 03:15:08
osv
osv
CVE-2022-23461
2022-09-24 03:15:08
Jodit Editor vulnerable to Cross-site Scripting
2022-09-25 00:00:15
cnvd
cnvd
Jodit Editor Cross-Site Scripting Vulnerability
2022-09-28 00:00:00
github
github
Jodit Editor vulnerable to Cross-site Scripting
2022-09-25 00:00:15
prion
prion
Design/Logic Flaw
2022-09-24 03:15:00
cvelist
cvelist
CVE-2022-23461 Cross-Site Scripting (XSS) in Jodit Editor
2022-09-24 03:05:08
nvd
nvd
CVE-2022-23461
2022-09-24 03:15:08