Skip to content

Vendor

editorjs vulnerabilities

1 published CVE affecting editorjs, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0
Atom feed of editorjs alerts

Products

Latest editorjs CVEs

Newest publication first

  1. CVE-2022-23474 editor.js contains Code Injection

    Published
    MediumCVSS 6.1 EPSS 0.57%

    Editor.js is a block-style editor with clean JSON output. Versions prior to 2.26.0 are vulnerable to Code Injection via pasted input. The processHTML method passes pasted input into wrapper’s innerHTML. This issue is patched in version 2.26.0.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.