xdan jodit

• CVE-2026-65841 Medium 5.3 Jodit has cross-site scripting (XSS) via <script> nested in SVG that bypasses clean-html sanitization 0.5%
• CVE-2026-62324 Medium 5.4 Jodit has incomplete javascript: scheme normalization in sanitizeHTMLElement href check that allows link XSS 0.3%
• CVE-2026-58263 High 7.2 Jodit Editor: Mutation XSS in jodit clean-html via a MathML/style rawtext carrier 0.2%
• CVE-2026-54756 Medium 6.3 Jodit Editor: Prototype pollution via Jodit.configure() / ConfigMerge 0.5%
• CVE-2026-55886 Medium 6.3 Jodit Editor: Prototype Pollution in Jodit via Jodit.modules.Helpers.set() 0.5%