Cross-Site Scripting (XSS)

vuejs is susceptible to cross-site scripting XSS attacks. The attacks are possible because it does not escape the value string in the renderAttr function in src/platforms/web/server/modules/attrs.js, allowing a malicious user to inject and execute arbitrary JavaScript...