Lucene search
K

4 matches found

Github Security Blog
Github Security Blog
added 2024/05/24 2:45 p.m.13 views

vxe-table Cross-site Scripting vulnerability

A vulnerability, which was classified as problematic, has been found in xuliangzhan vxe-table up to 3.7.9. This issue affects the function export of the file packages/textarea/src/textarea.js of the component vxe-textarea. The manipulation of the argument inputValue leads to cross site scripting...

5.3CVSS6.4AI score0.00141EPSS
Exploits0References8Affected Software1
Vulnrichment
Vulnrichment
added 2024/05/24 6:0 a.m.9 views

CVE-2023-1001 xuliangzhan vxe-table vxe-textarea textarea.js export cross site scripting

A vulnerability, which was classified as problematic, has been found in xuliangzhan vxe-table up to 3.7.9. This issue affects the function export of the file packages/textarea/src/textarea.js of the component vxe-textarea. The manipulation of the argument inputValue leads to cross site scripting...

5.3CVSS6.2AI score0.00141EPSS
Exploits0References5
Cvelist
Cvelist
added 2024/05/24 6:0 a.m.9 views

CVE-2023-1001 xuliangzhan vxe-table vxe-textarea textarea.js export cross site scripting

A vulnerability, which was classified as problematic, has been found in xuliangzhan vxe-table up to 3.7.9. This issue affects the function export of the file packages/textarea/src/textarea.js of the component vxe-textarea. The manipulation of the argument inputValue leads to cross site scripting...

5.3CVSS3.6AI score0.00141EPSS
Exploits0References5
CVE
CVE
added 2024/05/24 6:0 a.m.48 views

CVE-2023-1001

The CVE-2023-1001 entry concerns xuliangzhan vxe-table (up to 3.7.9) where the textarea.js export function inputValue is vulnerable to cross-site scripting. The vulnerability is exploitable remotely and is caused by improper handling of inputValue in the vxe-textarea component. Upgrade to version...

5.3CVSS3.6AI score0.00141EPSS
Exploits0References5
Rows per page
Query Builder