What’s Vulnerable › Products

xdan jodit vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your xdan jodit version is affected

Latest xdan jodit vulnerabilities

• CVE-2026-65841 — Jodit has cross-site scripting (XSS) via <script> nested in SVG that bypasses clean-html sanitization (CVSS 5.3)
• CVE-2026-62324 — Jodit has incomplete javascript: scheme normalization in sanitizeHTMLElement href check that allows link XSS (CVSS 5.4)
• CVE-2026-58263 — Jodit Editor: Mutation XSS in jodit clean-html via a MathML/style rawtext carrier (CVSS 7.2)
• CVE-2026-55886 — Jodit Editor: Prototype Pollution in Jodit via Jodit.modules.Helpers.set() (CVSS 6.3)
• CVE-2026-54756 — Jodit Editor: Prototype pollution via Jodit.configure() / ConfigMerge (CVSS 6.3)