jodit vulnerabilities (npm)
7 vulnerabilities.
-
joditnpm Jodit has cross-site scripting (XSS) via <script> nested in SVG that bypasses clean-html sanitization 5.3 Medium -
joditnpm Jodit has incomplete javascript: scheme normalization in sanitizeHTMLElement href check that allows link XSS 5.4 Medium -
joditnpm Jodit Editor: Mutation XSS in jodit clean-html via a MathML/style rawtext carrier 7.2 High -
joditnpm Jodit Editor: Prototype pollution via Jodit.configure() / ConfigMerge 6.3 Medium -
joditnpm Jodit Editor: Prototype Pollution in Jodit via Jodit.modules.Helpers.set() 6.3 Medium -
joditnpm Jodit Editor vulnerable to cross-site scripting 6.1 Medium -
joditnpm Cross-Site Scripting (XSS) in Jodit Editor 5.4 Medium