jodit@4.2.39 vulnerabilities

Jodit is an awesome and useful wysiwyg editor with filebrowser

4.6.13

9 years ago

18 days ago

Known vulnerabilities in the jodit package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
M Cross-site Scripting (XSS) jodit is a Jodit is awesome and usefully wysiwyg editor with filebrowser Affected versions of this package are vulnerable to Cross-site Scripting (XSS) via the `rich text editor component`, allowing an attacker to obtain sensitive information by sending a specially crafted payload. How to fix Cross-site Scripting (XSS)? There is no fixed version for `jodit`.	*
M Cross-site Scripting (XSS) jodit is a Jodit is awesome and usefully wysiwyg editor with filebrowser Affected versions of this package are vulnerable to Cross-site Scripting (XSS) when pasting specially constructed input. How to fix Cross-site Scripting (XSS)? There is no fixed version for `jodit`.	*