Vulnerabilities

TI-2026-46914 CVE-2026-65841 · GHSA-45qg-252v-3f7p

Jodit has cross-site scripting (XSS) via <script> nested in SVG that bypasses clean-html sanitization

MEDIUM 57

Jodit Editor is a WYSIWYG editor with a built-in file browser & image editor.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00529 Published 2026-07-31 Fixed in 4.13.6 CWE-80

TI-2026-44496 CVE-2026-62324 · GHSA-j839-gqq4-gf9j

MEDIUM 58

Jodit Editor is a WYSIWYG editor with a built-in file browser & image editor.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00313 Published 2026-07-31 Fixed in 4.12.31 CWE-79

TI-2026-41956 CVE-2026-58263 · GHSA-rxcw-mc6f-6hr3

HIGH 71

Jodit Editor is a WYSIWYG editor with a built-in file browser & image editor.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00216 Published 2026-07-01 Fixed in 4.12.28 CWE-79

TI-2026-39562 CVE-2026-54756 · GHSA-5957-5c94-3v7w

MEDIUM 63

Jodit Editor is a WYSIWYG editor with written in pure TypeScript file and image editing capabilities.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00462 Published 2026-07-01 Fixed in 4.12.18 CWE-1321

TI-2026-40339 CVE-2026-55886 · GHSA-vpmm-x3fm-qr5c

HIGH 67

Jodit Editor is a WYSIWYG editor with written in pure TypeScript file and image editing capabilities.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00534 Published 2026-07-01 Fixed in 4.12.26 CWE-1321