Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2022-23474

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-6mvj-2569-3mcm

Editor.js vulnerable to Code Injection Editor.js is a block-style editor with clean JSON output. Versions prior to 2.26.0 are vulnerable to Code Injection via pasted input. The processHTML method passes pasted input into wrapper’s innerHTML. This issue is patched in version 2.26.0.

gitlab/npm/editor.js/CVE-2022-23474

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Editor.js is a block-style editor with clean JSON output. Versions prior to 2.26.0 is vulnerable to Code Injection via pasted input. The processHTML method passes pasted input into wrapper’s innerHTML. This issue is patched in version 2.26.0.

gitlab/npm/@editorjs/editorjs/CVE-2022-23474

Editor.js vulnerable to Code Injection Editor.js is a block-style editor with clean JSON output. Versions prior to 2.26.0 are vulnerable to Code Injection via pasted input. The processHTML method passes pasted input into wrapper’s innerHTML. This issue is patched in version 2.26.0.