CVE-2023-50550

layui up to v2.74 was discovered to contain a cross-site scripting XSS vulnerability via the data-content parameter...

CVE-2023-50550

CVE-2023-50550 affects Layui up to version 2.74, where the vulnerability is a reflected/XSS via the data-content parameter. The underlying issue is a cross-site scripting flaw in the data-content handling, with CVSSv3.1 metrics: AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N (base score 5.4). Impact is Limi...