Known vulnerabilities in Jodit Editor

Software: Jodit Editor
Software CPE: cpe:2.3:a:xdan_valeriy:jodit_editor:*:*:*:*:*:*:*:*
Total vulnerabilities: 5
Public exploits: 4
Known exploited (KEV): 0
Highest CVSSv4 Score: 6.9

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Jodit Editor Jodit Editor is affected by 5 known vulnerabilities: 2 medium, 3 low Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139560 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-62324
CWE-79 Low
Available
No
4.12.31 27.07.2026 SB20260727173
#VU139550 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2026-55886
CWE-1321 Medium
Available
No
4.12.26 27.07.2026 SB20260727172
#VU139517 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2026-54756
CWE-1321 Medium
Available
No
4.12.18 27.07.2026 SB20260727171
#VU139505 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-65841
CWE-79 Low
Available
No
4.13.6 27.07.2026 SB20260727169
#VU80957 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-42399
CWE-79 Low
No
No
4.0.0 beta.87 21.09.2023 SB2023092125