Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2022-23461

Date: September 23, 2022

Jodit Editor is a WYSIWYG editor written in pure TypeScript without the use of additional libraries. Jodit Editor is vulnerable to XSS attacks when pasting specially constructed input. This issue has not been fully patched. There are no known workarounds.

Language: JS

Severity Score

Related Resources (5)

https://securitylab.github.com/advisories/GHSL-2022-030_xdan_jodit
https://securitylab.github.com/advisories/GHSL-2022-030_xdan_jodit/
https://github.com/xdan/jodit
https://nvd.nist.gov/vuln/detail/CVE-2022-23461
https://www.mend.io/vulnerability-database/CVE-2022-23461

Severity Score

Weakness Type (CWE)

Cross-Site Scripting (XSS)

CWE-79

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): LOW
User Interaction (UI): REQUIRED
Scope (S): CHANGED
Confidentiality (C): LOW
Integrity (I): LOW
Availability (A): NONE

Do you need more information?

Contact Us