Xdan Jodit vulnerabilities
- xdan jodit Jodit has cross-site scripting (XSS) via <script> nested in SVG that bypasses clean-html sanitization 5.3 Medium
- xdan jodit Jodit has incomplete javascript: scheme normalization in sanitizeHTMLElement href check that allows link XSS 5.4 Medium
- xdan jodit Jodit Editor: Mutation XSS in jodit clean-html via a MathML/style rawtext carrier 7.2 High
- xdan jodit Jodit Editor: Prototype pollution via Jodit.configure() / ConfigMerge 6.3 Medium
- xdan jodit Jodit Editor: Prototype Pollution in Jodit via Jodit.modules.Helpers.set() 6.3 Medium
- xdan jodit editor Cross-Site Scripting (XSS) in Jodit Editor 5.4 Medium