Skip to content
OpenAdvisories

Package · npm

jodit

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.2
    CVE-2026-58263

    Jodit Editor: Mutation XSS in jodit clean-html via a MathML/style rawtext carrier

    Jodit Editor is a WYSIWYG editor with a built-in file browser & image editor. In versions prior to 4.12.28, the built-in clean-html sanitizer can be bypassed by a MathML/<style> carrier that hides a dangerous element from the sanitizer's element walk, so a no…

    xdan jodit jodit npm