MAL-2025-40129 Malicious code in yakutsk-protractor-vuetify-less-loader (npm)

The package yakutsk-protractor-vuetify-less-loader was found to contain malicious code...

Malicious code in barnard-vuetify-passport-antares (npm)

The package barnard-vuetify-passport-antares was found to contain malicious code...

Malicious code in ichnology-helios-grus-vuetify (npm)

The package ichnology-helios-grus-vuetify was found to contain malicious code...

Malicious code in tool-dorado-framework-vuetify (npm)

The package tool-dorado-framework-vuetify was found to contain malicious code...

Malicious code in vuetify-capella-hyperion-xenon (npm)

The package vuetify-capella-hyperion-xenon was found to contain malicious code...

Malicious code in vuetify-commitizen-prompts-dotenv-parse-variables (npm)

The package vuetify-commitizen-prompts-dotenv-parse-variables was found to contain malicious code...

Malicious code in vuetify-electron-builder-pulsar-module (npm)

The package vuetify-electron-builder-pulsar-module was found to contain malicious code...

Malicious code in vuetify-halley-aldebaran-radiant (npm)

The package vuetify-halley-aldebaran-radiant was found to contain malicious code...

Malicious code in vuetify-jwt-pegasus-spawn (npm)

The package vuetify-jwt-pegasus-spawn was found to contain malicious code...

Malicious code in vuetify-proteomics-biohacking-cors (npm)

The package vuetify-proteomics-biohacking-cors was found to contain malicious code...

Malicious code in vuetify-sagitta-dactyl-framework (npm)

The package vuetify-sagitta-dactyl-framework was found to contain malicious code...

Malicious code in vuetify-superagent-eslint-config-spawn (npm)

The package vuetify-superagent-eslint-config-spawn was found to contain malicious code...

Malicious code in yakutsk-protractor-vuetify-less-loader (npm)

The package yakutsk-protractor-vuetify-less-loader was found to contain malicious code...

Exploit for CVE-2025-1461

Vuetify VCalendar XSS Vulnerability POC CVE-2025-1461 This...

CVE-2025-1461

Improper neutralization of the value of the 'eventMoreText' property of the 'VCalendar' component in Vuetify allows unsanitized HTML to be inserted into the page. This can lead to a Cross-Site Scripting XSS https://owasp.org/www-community/attacks/xss attack. The vulnerability occurs because the...

Cross-site Scripting (XSS)

Overview org.webjars.npm:vuetify is an a Material Design component framework for Vue.js. Affected versions of this package are vulnerable to Cross-site Scripting XSS due to the improper neutralization of input in the eventMoreText property of the VCalendar component. An attacker can execute...

Cross-site Scripting (XSS)

Overview org.webjars.bowergithub.vuetifyjs:vuetify is an a Material Design component framework for Vue.js. Affected versions of this package are vulnerable to Cross-site Scripting XSS due to the improper neutralization of input in the eventMoreText property of the VCalendar component. An attacker...

CVE-2025-1461 Vuetify XSS through 'eventMoreText' prop of VCalendar

Improper neutralization of the value of the 'eventMoreText' property of the 'VCalendar' component in Vuetify allows unsanitized HTML to be inserted into the page. This can lead to a Cross-Site Scripting XSS https://owasp.org/www-community/attacks/xss attack. The vulnerability occurs because the...

CVE-2025-1461

CVE-2025-1461 affects Vuetify’s VCalendar eventMoreText prop. Affected: Vuetify >=2.0.0 and

CVE-2025-1461 Vuetify XSS through 'eventMoreText' prop of VCalendar

Improper neutralization of the value of the 'eventMoreText' property of the 'VCalendar' component in Vuetify allows unsanitized HTML to be inserted into the page. This can lead to a Cross-Site Scripting XSS https://owasp.org/www-community/attacks/xss attack. The vulnerability occurs because the...