Jodit Editor vulnerable to cross-site scripting

Description

Cross Site Scripting vulnerability in xdsoft.net Jodit Editor v.4.0.0-beta.86 allows a remote attacker to obtain sensitive information via the rich text editor component.

Recommendation

No fix is available yet. Followings are affected versions:

• = 4.0.0-beta.86

References

• GHSA-95xr-cq6h-vwr3
• CVE-2023-42399
• CWE-79
• CAPEC-310
• OWASP 2021-A3
• OWASP 2021-A6

Related Issues

• Jodit Editor vulnerable to Cross-site Scripting - jodit - CVE-2022-23461
• editor.md vulnerable to Cross-site Scripting - CVE-2023-29641
• tarteaucitron.js vulnerable to Cross-site Scripting - CVE-2023-3620
• rsshub vulnerable to Cross-site Scripting via unvalidated URL parameters - CVE-2023-26491

You might also like:

How to Secure your NodeJs Express Javascript Application - part 1

How to Secure your NodeJs Express Javascript Application - part 2

10 Secure Coding Best Practices to Follow in Every Project

Tags:

npm

jodit