Svelecte item names vulnerable to execution of arbitrary JavaScript

🗓️ 14 Aug 2023 21:08:14Reported by GitHub Advisory DatabaseType

Svelecte item names allow execution of arbitrary JavaScrip

Reporter	Title	Published	Views	Family All 7
Prion	Cross site scripting	14 Aug 202321:15	–	prion
Veracode	Cross Site Scripting (XSS)	16 Aug 202300:42	–	veracode
OSV	Svelecte item names vulnerable to execution of arbitrary JavaScript	14 Aug 202321:14	–	osv
NVD	CVE-2023-38687	14 Aug 202321:15	–	nvd
Cvelist	CVE-2023-38687 Execution of arbitrary JavaScript from Svelecte item names	14 Aug 202320:21	–	cvelist
Vulnrichment	CVE-2023-38687 Execution of arbitrary JavaScript from Svelecte item names	14 Aug 202320:21	–	vulnrichment
CVE	CVE-2023-38687	14 Aug 202321:15	–	cve

Vulners

Node

-svelecteRange<3.16.3

Source	Link
github	www.github.com/mskocik/svelecte/security/advisories/GHSA-7h45-grc5-89wq
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-38687
github	www.github.com/advisories/GHSA-7h45-grc5-89wq

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

14 Aug 2023 21:14Current

7.1High risk

Vulners AI Score7.1

EPSS0.001

CWE-79