Threats tagged 'ghsa-45qg-252v-3f7p'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.5%	CVE-2026-65841xdan jodit · Basic XSS Medium5.3EPSS 0.5%2026-07-31CVE Database V5CVE-2026-65841 Jodit Editor is a WYSIWYG editor with a built-in file browser & image editor. Prior to 4.13.6, Jodit's clean-html denyTags filter does not normalize foreign SVG or MathML script node names, allowing a script element nested directly in SVG or MathML to remain in editor.value and execute when content is loaded. This issue is fixed in version 4.13.6. EPSS 0.5%Vulnerability CWE-80 #ghsa-45qg-252v-3f7p #npm	CVE Database V5	2026-07-31

Page 1 of 1