CVE-2022-23461 — Cross-Site Scripting (XSS) in Jodit Editor

CVE-2022-23461

Cross-Site Scripting (XSS) in Jodit Editor PUBLISHED

Description (CNA)

Jodit Editor is a WYSIWYG editor written in pure TypeScript without the use of additional libraries. Jodit Editor is vulnerable to XSS attacks when pasting specially constructed input. This issue has not been fully patched. There are no known workarounds.

Affected (CNA)

Vendor / product	Versions
xdan / Jodit Editor	affected 3.20.4 through 3.20.4

CWE

CWE-79

References

https://securitylab.github.com/advisories/GHSL-2022-030_xdan_jodit/

ADP enrichment

CVE

No English description supplied.

https://securitylab.github.com/advisories/GHSL-2022-030_xdan_jodit/

CISA-ADP

No English description supplied.

No references supplied.