CVE-2016-10744 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

Security Bulletin: IBM Process Mining is vulnerable to cross-site scripting due to Select2 CVE-2016-10744

Summary Select2 is used by IBM Process Mining. CVE-2016-10744. Vulnerability Details CVEID:CVE-2016-10744 DESCRIPTION: Select2 is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by the rich selectlists. A remote attacker could exploit this vulnerability to...

@binary-com/binary-style (>=0.2.4, <=0.2.26), @dfeidao/widgets (>=4.5.201903181201, <=4.6.201904291719) +22 more potentially affected by CVE-2016-10744 via select2 (>=4.0.1, <=4.0.6-rc.1)

select2 NPM version =4.0.1, =0.2.4, =4.5.201903181201, =0.0.1, =3.0.201812052011, =1.1.2, =0.1.0, =1.0.4, =2.3.1, =0.11.28, =0.1.0, =1.0.0, =0.0.8, =0.0.13 and more Source cves: CVE-2016-10744 Source advisory: GHSA-RF66-HMQF-Q3FC...

CVE-2016-10744

In Select2 through 4.0.5, as used in Snipe-IT and other products, rich selectlists allow XSS. This affects use cases with Ajax remote data loading when HTML templates are used to display listbox data...

CVE-2016-10744

CVE-2016-10744 affects Select2 up to version 4.0.5 (as used by products like Snipe-IT). The vulnerability is a cross-site scripting (XSS) flaw in rich selectlists when Ajax remote data is loaded and HTML templates render listbox data. NVD lists CVSS v3.0 base score 6.1 (UI Required, Network vecto...

@binary-com/binary-style (>=0.2.4, <=0.2.26), @dfeidao/widgets (>=4.5.201903181201, <=4.6.201904291719) +67 more potentially affected by CVE-2016-10744 via select2 (>=3.4.3, <=4.0.6-rc.1)

select2 NPM version =3.4.3, =0.2.4, =4.5.201903181201, =0.0.1, =0.1.2, =0.8.4, =3.0.201812052011, =0.1.0, =0.0.0-2025.1-0, =0.0.0-2025.1-0, =0.0.0-2025.1-0, =0.0.0-2025.1-0, =0.0.0-2025.1-0, =0.0.0-2025.1-0, =0.0.0-2025.1-0, =2026.3.1 and more Source cves: CVE-2016-10744 Source advisory:...