Lucene search
K

CVE-2022-25875

🗓️ 12 Jul 2022 14:20:17Reported by snykType 
cve
 cve
🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 81 Views

The svelte package before 3.49.0 is vulnerable to Cross-site Scripting (XSS) via improper input sanitization and escape of attributes during SSR

Related
Detection
Affected
Refs
Social
ReporterTitlePublishedViews
Family
ATTACKERKB
CVE-2022-25875
12 Jul 202214:15
attackerkb
Circl
CVE-2022-25875
12 Jul 202222:25
circl
CNNVD
svelte 跨站脚本漏洞
12 Jul 202200:00
cnnvd
Cvelist
CVE-2022-25875 Cross-site Scripting (XSS)
12 Jul 202214:20
cvelist
EUVD
EUVD-2022-6441
3 Oct 202520:07
euvd
Github Security Blog
Svelte vulnerable to XSS when using objects during server-side rendering
13 Jul 202200:00
github
NVD
CVE-2022-25875
12 Jul 202219:15
nvd
OSV
GHSA-WV8Q-R932-8HC7 Svelte vulnerable to XSS when using objects during server-side rendering
13 Jul 202200:00
osv
Prion
Cross site scripting
12 Jul 202219:15
prion
Snyk
Cross-site Scripting (XSS)
17 Jun 202213:10
snyk
Rows per page
NVD
Node
sveltesvelteRange<3.49.0node.js
[
  {
    "product": "svelte",
    "vendor": "n/a",
    "versions": [
      {
        "lessThan": "3.49.0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

21 Nov 2024 06:53Current
5.7Medium risk
Vulners AI Score5.7
CVSS 24.3
CVSS 3.15.4 - 6.1
EPSS0.00725
81