CVE-2023-3691 layui HTML Attribute cross site scripting

A vulnerability, which was classified as problematic, was found in layui up to v2.8.0-rc.16. This affects an unknown part of the component HTML Attribute Handler. The manipulation of the argument title leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to...

CVE-2023-3691 layui HTML Attribute cross site scripting

A vulnerability, which was classified as problematic, was found in layui up to v2.8.0-rc.16. This affects an unknown part of the component HTML Attribute Handler. The manipulation of the argument title leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to...

CVE-2023-3691

Layui up to v2.8.0-rc.16 contains a cross-site scripting vulnerability in the HTML Attribute Handler where manipulating the title argument enables XSS. The issue can be triggered remotely, and upgrading to version 2.8.0 addresses the vulnerability. Multiple connected sources (including Red Hat, C...