Log in Start free

xdan

Products

ProductCVEsExploitedLatest
jodit5–Jul 31, 2026
Jodit Editor1–Sep 24, 2022

Exploited and recent CVEs

  • CVE-2026-65841 Medium 5.3 Jodit has cross-site scripting (XSS) via <script> nested in SVG that bypasses clean-html sanitization 0.5%
  • CVE-2026-62324 Medium 5.4 Jodit has incomplete javascript: scheme normalization in sanitizeHTMLElement href check that allows link XSS 0.3%
  • CVE-2026-58263 High 7.2 Jodit Editor: Mutation XSS in jodit clean-html via a MathML/style rawtext carrier 0.2%
  • CVE-2026-54756 Medium 6.3 Jodit Editor: Prototype pollution via Jodit.configure() / ConfigMerge 0.5%
  • CVE-2026-55886 Medium 6.3 Jodit Editor: Prototype Pollution in Jodit via Jodit.modules.Helpers.set() 0.5%
  • CVE-2022-23461 Medium 5.4 Cross-Site Scripting (XSS) in Jodit Editor 0.6%