CVE-2022-23461CWE-79

Cross-Site Scripting (XSS) in Jodit Editor

Medium · published September 24, 2022

CVSS v3.1
5.4
EPSS
1%
Percentile
49.0
In the wild
Unconfirmed
What it is

Jodit Editor is a WYSIWYG editor written in pure TypeScript without the use of additional libraries. Jodit Editor is vulnerable to XSS attacks when pasting specially constructed input. This issue has not been fully patched. There are no known workarounds.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00619 · 49.0th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2022-09-24T03:05Z
EPSS history
Timeline
  • 24 SEP 03:05Z
    Cross-Site Scripting (XSS) in Jodit Editor
    cvelistv5