Medium severity5.4NVD Advisory· Published Sep 24, 2022· Updated Jun 17, 2026
CVE-2022-23461
CVE-2022-23461
Description
Jodit Editor is a WYSIWYG editor written in pure TypeScript without the use of additional libraries. Jodit Editor is vulnerable to XSS attacks when pasting specially constructed input. This issue has not been fully patched. There are no known workarounds.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
joditnpm | <= 3.24.2 | — |
Affected products
3- xdan/Jodit Editorv5Range: 3.20.4
Patches
Vulnerability mechanics
References
4- securitylab.github.com/advisories/GHSL-2022-030_xdan_jodit/nvdExploitThird Party Advisory
- github.com/advisories/GHSA-42hx-vrxx-5r6vghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2022-23461ghsaADVISORY
- securitylab.github.com/advisories/GHSL-2022-030_xdan_joditghsaADVISORY
News mentions
0No linked articles in our index yet.