3 matches found
Code injection
In Select2 through 4.0.5, as used in Snipe-IT and other products, rich selectlists allow XSS. This affects use cases with Ajax remote data loading when HTML templates are used to display listbox data...
4.3CVSS6.9AI score0.01762EPSS
SaveExploits0References3Affected Software1
CVE-2016-10744
In Select2 through 4.0.5, as used in Snipe-IT and other products, rich selectlists allow XSS. This affects use cases with Ajax remote data loading when HTML templates are used to display listbox data...
6.1AI score0.01762EPSS
SaveExploits0References3
CVE-2016-10744: Improper Neutralization of Input During Web Page Generation
In Select2 through 4.0.5, as used in Snipe-IT and other products, rich selectlists allow XSS. This affects use cases with Ajax remote data loading when HTML templates are used to display listbox data...
6.1CVSS5.8AI score0.01762EPSS
SaveExploits0References2
20