CVE-2022-23461
Cross-Site Scripting (XSS) in Jodit Editor
Summary
Cross-Site Scripting (XSS) in Jodit Editor
Original description
The description as published by the source.
Jodit Editor is a WYSIWYG editor written in pure TypeScript without the use of additional libraries. Jodit Editor is vulnerable to XSS attacks when pasting specially constructed input. This issue has not been fully patched. There are no known workarounds.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory nvd.nist.gov
- advisory securitylab.github.com