CVE-2022-25979

Versions of the package jsuites before 5.0.1 are vulnerable to Cross-site Scripting (XSS) due to improper user-input sanitization in the Editor() function.

Score

CVSS 3.1 6.1 Medium

Status

Modified - report@snyk.io

Published

2023-01-31

Last modified

2025-03-27

Weaknesses

CWE-79

Affected products

• Jsuites (Jsuites)

References

• https://github.com/jsuites/jsuites/commit/b31770d5fe91684a00177f629aab933139c32d9f
• https://github.com/jsuites/jsuites/issues/134
• https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-3253331
• https://security.snyk.io/vuln/SNYK-JS-JSUITES-3226764