medium6.1
CVE-2023-42399
Jodit Editor vulnerable to cross-site scripting
Impact
Cross Site Scripting vulnerability in xdsoft.net Jodit Editor v.4.0.0-beta.86 allows a remote attacker to obtain sensitive information via the rich text editor component.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | jodit | = 4.0.0-beta.86 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Xdsoft | Joditeditor | Version 4.0.0 |