Skip to content
OpenAdvisories
Medium · 5.4 CVE-2022-25979 EUVD-2023-0540GHSA-r4hg-4cpq-q57c

jSuites subect to Cross-site Scripting

Published Jan 31, 2023 · Updated Mar 27, 2025 · Assigned by snyk

Description

Versions of the package jsuites before 5.0.1 are vulnerable to Cross-site Scripting (XSS) due to improper user-input sanitization in the Editor() function.

Affected products

VendorProductAffectedFixed
— jsuites < 5.0.1 5.0.1
— org.webjars.npm:jsuites — —

Affected packages

EcosystemPackageAffectedFixedRecord
npm jsuites < 5.0.1 5.0.1 GHSA-r4hg-4cpq-q57c

References