medium6.1
CVE-2020-23849
Cross-site Scripting in jsoneditor
Impact
Stored XSS was discovered in the tree mode of jsoneditor before 9.0.2 through injecting and executing JavaScript.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | jsoneditor | < 9.0.2 | 9.0.2 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jsoneditoronline | Jsoneditor | from 8.6.6 before 9.0.2 |