Jodit Editor vulnerable to cross-site scripting

GHSA-95xr-cq6h-vwr3 · CVE-2023-42399

Published Sep 19, 2023 · Modified Nov 8, 2023

Description

Cross Site Scripting vulnerability in xdsoft.net Jodit Editor v.4.0.0-beta.86 allows a remote attacker to obtain sensitive information via the rich text editor component.

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2023-42399
WEB https://github.com/xdan/jodit/issues/1017
PACKAGE https://github.com/xdan/jodit

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes