Jodit Editor vulnerable to cross-site scripting

Description

Cross Site Scripting vulnerability in xdsoft.net Jodit Editor v.4.0.0-beta.86 allows a remote attacker to obtain sensitive information via the rich text editor component.

Recommendation

No fix is available yet. Followings are affected versions:

• = 4.0.0-beta.86

References

• GHSA-95xr-cq6h-vwr3
• CVE-2023-42399
• CWE-79
• CAPEC-310
• OWASP 2021-A3
• OWASP 2021-A6

Related Issues

• mongosh vulnerable to local privilege escalation - CVE-2025-1756
• Elliptic's EDDSA missing signature length check - CVE-2024-42459
• Nuxt Devtools has a Path Traversal: '../filedir - CVE-2024-23657
• Incorrect default cookie name and recommendation - Vulnerability

Tags:

npm

jodit