Jodit Editor vulnerable to cross-site scripting

中危 6.1CVE-2023-42399 · GHSA-95xr-cq6h-vwr3 · Published 19/09/2023 · updated 09/07/2026

要点

CVE-2023-42399 是影响 joditeditor (xdsoft), jodit 的中危 (CVSS 6.1)漏洞。
未来 30 天内被利用的概率（EPSS）：0.54%，高于 45.6% 的漏洞。
暂无已修复版本：请关注参考资料中的厂商公告。

Package	Affected versions	Patched versions
joditeditor xdsoft	`= 4.0.0`	No fix yet
jodit npm	`= 4.0.0-beta.86`	No fix yet

Description

Cross Site Scripting vulnerability in xdsoft.net Jodit Editor v.4.0.0-beta.86 allows a remote attacker to obtain sensitive information via the rich text editor component.

NVD description

Cross Site Scripting vulnerability in xdsoft.net Jodit Editor v.4.0.0-beta.86 allows a remote attacker to obtain sensitive information via the rich text editor component.

References

nvd.nist.gov/vuln/detail/CVE-2023-42399 · ADVISORY
xdan/jodit · WEB
xdan/jodit · PACKAGE
xdsoft.net · Product

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free