← Back

Jsuites

jsuites

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Jsuites
jsuites
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-25979
1Jsuites
1Jsuites
Jun 17, 2026
Jan 31, 2023
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Versions of the package jsuites before 5.0.1 are vulnerable to Cross-site Scripting (XSS) due to improper user-input sanitization in the Editor() function.
CVE-2021-41086
1Jsuites
1Jsuites
Jun 17, 2026
Sep 21, 2021
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
jsuites is an open source collection of common required javascript web components. In affected versions users are subject to cross site scripting (XSS) attacks via clipboard content. jsuites is vulnerable to DOM based XS...Show more
jsuites is an open source collection of common required javascript web components. In affected versions users are subject to cross site scripting (XSS) attacks via clipboard content. jsuites is vulnerable to DOM based XSS if the user can be tricked into copying _anything_ from a malicious and pasting it into the html editor. This is because a part of the clipboard content is directly written to `innerHTML` allowing for javascript injection and thus XSS. Users are advised to update to version 4.9.11 to resolve.Show less