Xdsoft: Security Vulnerabilities
Cross Site Scripting vulnerability in xdsoft.net Jodit Editor v.4.0.0-beta.86 allows a remote attacker to obtain sensitive information via the rich text editor component.
CVSS Score
6.1
EPSS Score
0.001
Published
2023-09-19
Jodit Editor is a WYSIWYG editor written in pure TypeScript without the use of additional libraries. Jodit Editor is vulnerable to XSS attacks when pasting specially constructed input. This issue has not been fully patched. There are no known workarounds.
CVSS Score
5.4
EPSS Score
0.007
Published
2022-09-24