Cross-site Scripting

nice-select2 is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper sanitization of content rendered from the element, allowing attackers to inject malicious payloads that are executed in a victim's browser when they view or interact with the affected page...

CVE-2026-17528

Versions of the package nice-select2 before 2.4.1 are vulnerable to Cross-site Scripting XSS via the element. An attacker can supply a malicious payload that is rendered directly into the DOM without proper sanitization, causing arbitrary script execution in a victim’s browser when they view or...

EUVD-2026-49688

Versions of the package nice-select2 before 2.4.1 are vulnerable to Cross-site Scripting XSS via the element. An attacker can supply a malicious payload that is rendered directly into the DOM without proper sanitization, causing arbitrary script execution in a victim’s browser when they view or...

CVE-2026-17528

Versions of the package nice-select2 before 2.4.1 are vulnerable to Cross-site Scripting XSS via the element. An attacker can supply a malicious payload that is rendered directly into the DOM without proper sanitization, causing arbitrary script execution in a victim’s browser when they view or...

CVE-2026-17528

Versions of the package nice-select2 before 2.4.1 are vulnerable to Cross-site Scripting XSS via the element. An attacker can supply a malicious payload that is rendered directly into the DOM without proper sanitization, causing arbitrary script execution in a victim’s browser when they view or...

CVE-2026-17528

Versions of the package nice-select2 before 2.4.1 are vulnerable to Cross-site Scripting XSS via the element. An attacker can supply a malicious payload that is rendered directly into the DOM without proper sanitization, causing arbitrary script execution in a victim’s browser when they view or...

CVE-2026-17528

Versions of the package nice-select2 before 2.4.1 are vulnerable to Cross-site Scripting XSS via the element. An attacker can supply a malicious payload that is rendered directly into the DOM without proper sanitization, causing arbitrary script execution in a victim’s browser when they view or...

CVE-2026-17528: Improper Neutralization of Input During Web Page Generation

Versions of the package nice-select2 before 2.4.1 are vulnerable to Cross-site Scripting XSS via the element. An attacker can supply a malicious payload that is rendered directly into the DOM without proper sanitization, causing arbitrary script execution in a victim’s browser when they view or...

Cross-site Scripting (XSS)

Overview nice-select2 is an A lightweight Vanilla JavaScript plugin that replaces native select elements with customizable dropdowns. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the element. An attacker can supply a malicious payload that is rendered directly...

Cross-site Scripting (XSS)

Overview org.webjars.npm:nice-select2 is an A lightweight Vanilla JavaScript plugin that replaces native select elements with customizable dropdowns. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the element. An attacker can supply a malicious payload that is...