VULNERABILITY INTELLIGENCE

CVE-2022-23461

CVSS score5.4 MEDIUM
EPSS probability0.62%
CISA KEVNot currently listed
Published2022-09-24
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Description

Jodit Editor is a WYSIWYG editor written in pure TypeScript without the use of additional libraries. Jodit Editor is vulnerable to XSS attacks when pasting specially constructed input. This issue has not been fully patched. There are no known workarounds.

Weakness classification

  • security-advisories@github.com: CWE-79

Primary references