CVE-2022-27103

CVE-2022-27103 affects element-plus 2.0.5, with a Cross Site Scripting (XSS) flaw exposed through el-table-column. The root cause described in the included records is inadequate sanitization/filtering of el-table-column content, allowing injected script execution. Multiple sources (CNNVD citing l...

@17mkh/ui (0.0.2), @advanced-elements/table (>=2.0.1, <=2.0.10) +653 more potentially affected by CVE-2022-27103 via element-plus (>=1.0.1-beta.0, <=2.0.5)

element-plus NPM version =1.0.1-beta.0, =2.0.1, =0.0.1, =0.0.1, =0.0.1, =0.6.6, =0.3.3, =0.0.1, =0.0.1, =0.1.15, =0.0.1, =0.0.1, =3.5.0 and more Source cves: CVE-2022-27103 Source advisory: MEND:CVE-2022-27103...

Element Plus Cross-Site Script Vulnerability

Element Plus is an open source Vue.js 3 UI library from the China Element Plus organization. A cross-site scripting vulnerability exists in Element Plus version 2.0.5, which stems from a lack of filtering and escaping of el-table-column in the application...

CVE-2022-27103: Improper Neutralization of Input During Web Page Generation

element-plus 2.0.5 is vulnerable to Cross Site Scripting XSS via el-table-column...

PT-2022-18221

Name of the Vulnerable Software and Affected Versions element-plus versions prior to 2.0.5 Description The issue concerns Cross Site Scripting XSS via the el-table-column component. Specifically, when the show-tooltips-overflow attribute of el-table-column is set to true, a mouseover action can...