~ / search / GHSA-95xr-cq6h-vwr3

GHSA-95xr-cq6h-vwr3

Jodit Editor vulnerable to cross-site scripting

Source: GitHub Advisory Database (reviewed) Moderate CVE-2023-42399

Packages

EcosystemPackageAffectedFixed in
npm jodit 4.0.0-beta.86 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Cross Site Scripting vulnerability in xdsoft.net Jodit Editor v.4.0.0-beta.86 allows a remote attacker to obtain sensitive information via the rich text editor component.

References

External links from the advisory. They lead to third-party sites.