Description
Stored XSS was discovered in the tree mode of jsoneditor before 9.0.2 through injecting and executing JavaScript.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | jsoneditor | < 9.0.2 | 9.0.2 | GHSA-q854-j362-cfq9 |
Medium · 6.1
CVE-2020-23849
EUVD-2021-2246GHSA-q854-j362-cfq9
Cross-site Scripting in jsoneditor
Published Jan 11, 2021 · Updated Aug 4, 2024 · Assigned by mitre