WS-2019-0293

Vant before 2.1.8 is vulnerable to Cross-Site Scripting. The text value of the Picker component column is not sanitized, which may allow attackers to execute arbitrary JavaScript in a victim's browser...

WS-2019-0259

In vant, versions prior to 2.1.8 are vulnerable to Cross-Site Scripting. The text value of the Picker component column isn't sanitized. this may lead attackers to execute arbitrary JavaScript in the victim's browser...