Jihong88

7 CVEs in 1 Jihong88 product, including Suneditor. Newest: CVE-2026-124494 (2026-11-08). Severity, EPSS and public exploits for each.

Jihong88 products with known CVEs

ProductCVEs
Suneditor7
Jihong88 CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-1244942026-11-08SunEditor before 3.4.0 contains a stored cross-site scripting vulnerability because the html.clean() sanitizer's _normalizeURL() function decodes named entitie…
CVE-2026-1244932026-11-08SunEditor before 3.4.0 contains a stored cross-site scripting vulnerability in the DocumentType constructor that injects header textContent into innerHTML with…
CVE-2026-124492High7.62026-11-08SunEditor before 3.4.0 contains a stored cross-site scripting vulnerability in ModalAnchorEditor's #createBookmarkList, which inserts entity-decoded h1-h6 head…
CVE-2026-124491Medium6.42026-11-08SunEditor before 3.4.0 contains a stored cross-site scripting vulnerability in the FileUpload plugin create() method that assigns server-returned file names to…
CVE-2026-124422Medium6.12026-11-08SunEditor from 3.0.0 before 3.4.0 contains a stored cross-site scripting vulnerability in html.clean() that rebuilds iframes from data-se-iframe-holder-attrs J…
CVE-2026-59167Critical10.02026-09-23SunEditor is a lightweight and powerful WYSIWYG editor in vanilla JavaScript with no dependencies. Prior to 2.47.11, the sanitizer in src/lib/core.js does not…
CVE-2026-546062026-08-26SunEditor is a lightweight and powerful WYSIWYG editor in vanilla JavaScript with no dependencies. Prior to 3.1.4, the SunEditor Embed plugin in src/plugins/mo…