https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 22:26:53 +0000 https://cve.radiocsirt.org/vuln/cve-2026-58263 <p><strong>Affected:</strong> xdan jodit</p> <p>Jodit Editor is a WYSIWYG editor with a built-in file browser &amp; image editor. In versions prior to 4.12.28, the built-in clean-html sanitizer can be bypassed by a MathML/&lt;style&gt; carrier that hides a dangerous element from the sanitizer&#39;s element walk, so a no-interaction event handler survives into the editor value, potentially causing Mutation XSS. When an application supplies attacker-influenced HTML to the editor&#39;s value-set or insertion paths, the sanitized output still contains a live &lt;img ... onload=...&gt; (or another non-onerror handler such as onfocus). A consumer that renders that output (element.innerHTML = editor.value) executes the handler with no user interaction. This issue has been fixed in version 4.12.28.</p> <p><strong>Affected:</strong> xdan jodit</p> <p>Jodit Editor is a WYSIWYG editor with a built-in file browser &amp; image editor. In versions prior to 4.12.28, the built-in clean-html sanitizer can be bypassed by a MathML/&lt;style&gt; carrier that hides a dangerous element from the sanitizer&#39;s element walk, so a no-interaction event handler survives into the editor value, potentially causing Mutation XSS. When an application supplies attacker-influenced HTML to the editor&#39;s value-set or insertion paths, the sanitized output still contains a live &lt;img ... onload=...&gt; (or another non-onerror handler such as onfocus). A consumer that renders that output (element.innerHTML = editor.value) executes the handler with no user interaction. This issue has been fixed in version 4.12.28.</p> https://cve.radiocsirt.org/vuln/cve-2026-58263