WS-2018-0162

Vue.js before 2.5.17 vesion in vue poject have potential xss in ssr when using v-bind...

Cross-site Scripting (XSS)

vue is vulnerable to cross-site scripting XSS attacks. A malicious user can inject arbitrary Javascript through the use of v-bind object attributes which is then executed when the page is rendered...