TI-2026-41956 CVE-2026-58263 · GHSA-rxcw-mc6f-6hr3
Jodit Editor: Mutation XSS in jodit clean-html via a MathML/style rawtext carrier
Priority HIGH 71
Jodit Editor is a WYSIWYG editor with a built-in file browser & image editor.
xdan
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
xdan records in CISA KEVNo xdan vulnerabilities are listed in CISA KEV.
Records
5 records
TI-2026-40339 CVE-2026-55886 · GHSA-vpmm-x3fm-qr5c
Jodit Editor: Prototype Pollution in Jodit via Jodit.modules.Helpers.set()
Priority HIGH 67
Jodit Editor is a WYSIWYG editor with written in pure TypeScript file and image editing capabilities.
TI-2026-39562 CVE-2026-54756 · GHSA-5957-5c94-3v7w
Jodit Editor: Prototype pollution via Jodit.configure() / ConfigMerge
Priority MEDIUM 63
Jodit Editor is a WYSIWYG editor with written in pure TypeScript file and image editing capabilities.
TI-2026-44496 CVE-2026-62324 · GHSA-j839-gqq4-gf9j
Jodit has incomplete javascript: scheme normalization in sanitizeHTMLElement href check that allows link XSS
Priority MEDIUM 58
Jodit Editor is a WYSIWYG editor with a built-in file browser & image editor.
TI-2026-46914 CVE-2026-65841 · GHSA-45qg-252v-3f7p
Jodit has cross-site scripting (XSS) via <script> nested in SVG that bypasses clean-html sanitization
Priority MEDIUM 57
Jodit Editor is a WYSIWYG editor with a built-in file browser & image editor.