CVE-2023-38687

Svelecte (Svelte) is vulnerable to XSS because item names are rendered as raw HTML without escaping, allowing arbitrary HTML/JavaScript execution when a dropdown is opened. The default item renderer and the commonly used custom item renderer are both affected. Impact depends on trustedness of ite...

CVE-2023-38687

creationtimestamp| type| source ---|---|--- 2023-08-12 13:32:06+00:00| published-proof-of-concept| https://github.com/mskocik/svelecte/security/advisories/GHSA-7h45-grc5-89wq 2023-08-15 00:20:01+00:00| published-proof-of-concept| https://t.me/cibsecurity/68495...