Most recent entries from all

Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 09:56:35 +0000 CVE-2026-65841 — Jodit has cross-site scripting (XSS) via <script> nested in SVG that bypasses clean-html sanitization https://cve.radiocsirt.org/vuln/cve-2026-65841 <p><strong>Affected:</strong> xdan jodit</p> <p>Jodit Editor is a WYSIWYG editor with a built-in file browser & image editor. Prior to 4.13.6, Jodit's clean-html denyTags filter does not normalize foreign SVG or MathML script node names, allowing a script element nested directly in SVG or MathML to remain in editor.value and execute when content is loaded. This issue is fixed in version 4.13.6.</p> <p><strong>Affected:</strong> xdan jodit</p> <p>Jodit Editor is a WYSIWYG editor with a built-in file browser & image editor. Prior to 4.13.6, Jodit's clean-html denyTags filter does not normalize foreign SVG or MathML script node names, allowing a script element nested directly in SVG or MathML to remain in editor.value and execute when content is loaded. This issue is fixed in version 4.13.6.</p> https://cve.radiocsirt.org/vuln/cve-2026-65841