npm/jodit CVE-2023-42399: medium 6.1, EPSS 0.54%

Jodit Editor vulnerable to cross-site scripting

Action: No fix published. Pin and monitor.

Affected

No affected ranges in the source.

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-95xr-cq6h-vwr3
• https://nvd.nist.gov/vuln/detail/CVE-2023-42399
• https://github.com/xdan/jodit/issues/1017
• https://github.com/xdan/jodit

CVE-2023-42399 · published 2023-09-19T06:30:17Z · modified 2023-11-08T04:13:27.927435Z · JSON