2 matches found
GHSA-RJVG-8V36-XV9R element-plus vulnerable to cross-site scripting (XSS) via el-table-column
element-plus below 2.0.5 is vulnerable to Cross Site Scripting XSS when attribute show-tooltips-overflow of el-table-column is true. The mouseover action will make the text of this column render as html...
6.1CVSS6.4AI score0.00894EPSS
SaveExploits1References7
PT-2022-18221
Name of the Vulnerable Software and Affected Versions element-plus versions prior to 2.0.5 Description The issue concerns Cross Site Scripting XSS via the el-table-column component. Specifically, when the show-tooltips-overflow attribute of el-table-column is set to true, a mouseover action can...
6.1CVSS0.00894EPSS
SaveExploits1References11
20