Description
Jodit Editor is a WYSIWYG editor written in pure TypeScript without the use of additional libraries. Jodit Editor is vulnerable to XSS attacks when pasting specially constructed input. This issue has not been fully patched. There are no known workarounds.
Remediation
References
https://securitylab.github.com/advisories/GHSL-2022-030_xdan_jodit/
Related Vulnerabilities
CVE-2019-10770 Vulnerability in maven package io.ratpack:ratpack-core
CVE-2021-33609 Vulnerability in maven package com.vaadin:vaadin-server
CVE-2021-25945 Vulnerability in npm package js-extend
CVE-2023-26486 Vulnerability in npm package vega-functions
CVE-2021-21391 Vulnerability in npm package @ckeditor/ckeditor5-markdown-gfm