1 matches found
GHSA-G3HC-697W-WM82 Livewire DOM-based cross-site scripting during client-side state handling
Impact In Livewire v3 ≤ 3.8.2 and v4 ≤ 4.3.3, a vulnerability allows unauthenticated attackers to execute arbitrary JavaScript in the origin of an affected application in specific scenarios. The issue stems from how certain client-side component state is handled. This vulnerability does not affec...
5.1CVSS6.4AI score0.00682EPSS
SaveExploits0References7
20