nes-vuetify-cve-2025-1461

Vuetify VCalendar XSS 취약점 POC CVE-2025-1461 이 저장소는 Vuetify의 VCalendar 컴포넌트, 특히 eventMoreText prop에서 발견된 XSS 취약점을 증명하는 개념 증명POC을 포함하고 있습니다. 취약점 세부 정보 CVE ID : CVE-2025-1461 영향받는 버전 : =2.0.0 3.0.0 심각도 : 중간 4.6 카테고리 : 크로스 사이트 스크립팅 XSS 사전 요구 사항 Node.js v14-16 npm 설치 1. 이 저장소를 클론합니다: git clone...

Cross-site Scripting (XSS)

Overview org.webjars.npm:vuetify is an a Material Design component framework for Vue.js. Affected versions of this package are vulnerable to Cross-site Scripting XSS due to the improper neutralization of input in the eventMoreText property of the VCalendar component. An attacker can execute...

CVE-2025-1461 Vuetify XSS through 'eventMoreText' prop of VCalendar

Improper neutralization of the value of the 'eventMoreText' property of the 'VCalendar' component in Vuetify allows unsanitized HTML to be inserted into the page. This can lead to a Cross-Site Scripting XSS https://owasp.org/www-community/attacks/xss attack. The vulnerability occurs because the...

CVE-2025-1461

CVE-2025-1461 affects Vuetify’s VCalendar eventMoreText prop. Affected: Vuetify >=2.0.0 and

CVE-2025-1461: Improper Neutralization of Input During Web Page Generation

Improper neutralization of the value of the 'eventMoreText' property of the 'VCalendar' component in Vuetify allows unsanitized HTML to be inserted into the page. This can lead to a Cross-Site Scripting XSS https://owasp.org/www-community/attacks/xss attack. The vulnerability occurs because the...