Lucene search
CVE-2023-38687 Execution of arbitrary JavaScript from Svelecte item names
Svelecte component allows injection of arbitrary JavaScript via item names
Show more
| Reporter | Title | Published | Views | Family All 7 |
|---|---|---|---|---|
 | Svelecte item names vulnerable to execution of arbitrary JavaScript | 14 Aug 202321:14 | – | osv |
 | Cross site scripting | 14 Aug 202321:15 | – | prion |
 | Cross Site Scripting (XSS) | 16 Aug 202300:42 | – | veracode |
 | CVE-2023-38687 | 14 Aug 202321:15 | – | nvd |
 | Svelecte item names vulnerable to execution of arbitrary JavaScript | 14 Aug 202321:14 | – | github |
 | CVE-2023-38687 Execution of arbitrary JavaScript from Svelecte item names | 14 Aug 202320:21 | – | vulnrichment |
 | CVE-2023-38687 | 14 Aug 202321:15 | – | cve |
[
{
"vendor": "mskocik",
"product": "svelecte",
"versions": [
{
"version": "< 3.16.3",
"status": "affected"
}
]
}
]Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo14 Aug 2023 20:21Current
6.0Medium risk
Vulners AI Score6.0
CVSS35.4
EPSS0.001