Lucene search
+L

12 matches found

OSV
OSV
added 2026/02/26 10:24 p.m.4 views

GHSA-PHWV-C562-GVMH Svelte vulnerable to XSS during SSR with contenteditable `bind:innerText` and `bind:textContent`

The contents of bind:innerText and bind:textContent on contenteditable elements were not properly escaped. This could enable HTML injection and Cross-site Scripting XSS if rendering untrusted data as the binding's initial value on the server...

5.3CVSS5.5AI score0.00214EPSS
SaveExploits0References5
Rows per page
Query Builder