CVE-2016-10744

In Select2 through 4.0.5, as used in Snipe-IT and other products, rich selectlists allow XSS. This affects use cases with Ajax remote data loading when HTML templates are used to display listbox data...

CVE-2016-10744: Improper Neutralization of Input During Web Page Generation

In Select2 through 4.0.5, as used in Snipe-IT and other products, rich selectlists allow XSS. This affects use cases with Ajax remote data loading when HTML templates are used to display listbox data...

PT-2019-7542

Name of the Vulnerable Software and Affected Versions Select2 versions through 4.0.5 Description The issue allows for XSS in certain use cases, specifically when using Ajax remote data loading and HTML templates to display listbox data. This affects rich selectlists. Recommendations For versions...

select2.nqu.edu.tw XSS vulnerability

Vulnerable URL: http://select2.nqu.edu.tw/kmkuas/system/sys00100.jsp?aa=0=1%22--%3E%3Csvg/onload=;prompt/OPENBUGBOUNTY/;%3Eagpro/ag222.jsp Details: Description| Value ---|--- Patched:| No Latest check for patch:| 07.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

Select2 Field Widget - Critical - Cross Site Scripting (XSS) - SA-CONTRIB-2015-173

Select2 Field Widget module enables you to use the select2 library for field widgets. The module doesn't sufficiently sanitize some user supplied text, leading to a reflected Cross Site Scripting vulnerability XSS. CVE identifiers issued ACVE identifier will be requested, and added upon issuance,...