Description

Jodit Editor is a WYSIWYG editor written in pure TypeScript without the use of additional libraries. Jodit Editor is vulnerable to XSS attacks when pasting specially constructed input. This issue has not been fully patched. There are no known workarounds.

Remediation

References

https://securitylab.github.com/advisories/GHSL-2022-030_xdan_jodit/

Related Vulnerabilities

CVE-2020-7712 Vulnerability in npm package json

CVE-2022-23496 Vulnerability in maven package nl.basjes.parse.useragent:yauaa-beam

CVE-2023-4853 Vulnerability in maven package io.quarkus:quarkus-undertow

CVE-2017-16116 Vulnerability in npm package string

CVE-2020-7635 Vulnerability in npm package compass-compile

Severity

High

Classification

CWE-79 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Exploit Third Party Advisory