Description
Stored XSS was discovered in the tree mode of jsoneditor before 9.0.2 through injecting and executing JavaScript.
Remediation
References
https://github.com/josdejong/jsoneditor/issues/1029
Related Vulnerabilities
CVE-2022-41713 Vulnerability in maven package org.webjars.npm:deep-object-diff
CVE-2020-11023 Vulnerability in maven package org.webjars.bowergithub.jquery:jquery
CVE-2023-40573 Vulnerability in maven package org.xwiki.platform:xwiki-platform-scheduler-api
CVE-2021-3664 Vulnerability in npm package url-parse
CVE-2023-3696 Vulnerability in maven package org.webjars.npm:mongoose