CERT24CVE-2026-58263 — Mutation XSS in Jodit Editor via a MathML/style rawtext carrierLoading data…
CERT24Threat Observatory
Period

CVE-2026-58263 — Mutation XSS in Jodit Editor via a MathML/style rawtext carrier

Jodit Editor’s built-in clean-html sanitizer can be bypassed using a MathML and <style> rawtext carrier. When attacker-influenced HTML is supplied through the editor’s value-setting or insertion paths and the output is later rendered, a surviving event handler can cause stored cross-site scripting without user interaction.

← Back to intelligence

CVE-2026-58263 — Mutation XSS in Jodit Editor via a MathML/style rawtext carrier

Jodit Editor’s built-in clean-html sanitizer can be bypassed using a MathML and <style> rawtext carrier. When attacker-influenced HTML is supplied through the editor’s value-setting or insertion paths and the output is later rendered, a surviving event handler can cause stored cross-site scripting without user interaction.