CVE-2026-58263:详情

CVE-2026-58263

7.2
/
高危
2026-07-01
20h35 +00:00
Cross-site Scripting
A03-Injection
Network
2026-07-31
19h07 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
管理通知

CVE 描述

Jodit Editor: Mutation XSS in jodit clean-html via a MathML/style rawtext carrier

Jodit Editor is a WYSIWYG editor with a built-in file browser & image editor. In versions prior to 4.12.28, the built-in clean-html sanitizer can be bypassed by a MathML/