5 matches found
GHSA-JJ27-H5HQ-8X99 Angular i18n: Cross-Site Scripting (XSS) via event-handler attributes
A Cross-Site Scripting XSS vulnerability has been identified in the Angular compiler's internationalization i18n pipeline. Although Angular disallows binding to event-handler attributes such as onclick and onerror through standard attribute validation validateAttribute / validateProperty, the i18...
7.6CVSS5.8AI score0.00199EPSS
SaveExploits0References6
20