Lucene search
+L

28 matches found

NVD
NVD
•added 2024/05/24 6:15 a.m.•32 views

CVE-2023-1001

A vulnerability, which was classified as problematic, has been found in xuliangzhan vxe-table up to 3.7.9. This issue affects the function export of the file packages/textarea/src/textarea.js of the component vxe-textarea. The manipulation of the argument inputValue leads to cross site scripting...

5.3CVSS3.7AI score0.00345EPSS
SaveExploits0References5
Mend
Mend
•added 2024/05/24 6:00 a.m.•2 views

CVE-2023-1001

A vulnerability, which was classified as problematic, has been found in xuliangzhan vxe-table up to 3.7.9. This issue affects the function export of the file packages/textarea/src/textarea.js of the component vxe-textarea. The manipulation of the argument inputValue leads to cross site scripting...

5.3CVSS0.00345EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment
•added 2024/05/24 6:00 a.m.•15 views

CVE-2023-1001 xuliangzhan vxe-table vxe-textarea textarea.js export cross site scripting

A vulnerability, which was classified as problematic, has been found in xuliangzhan vxe-table up to 3.7.9. This issue affects the function export of the file packages/textarea/src/textarea.js of the component vxe-textarea. The manipulation of the argument inputValue leads to cross site scripting...

5.3CVSS6.2AI score0.00345EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2024/05/24 6:00 a.m.•39 views

CVE-2023-1001 xuliangzhan vxe-table vxe-textarea textarea.js export cross site scripting

A vulnerability, which was classified as problematic, has been found in xuliangzhan vxe-table up to 3.7.9. This issue affects the function export of the file packages/textarea/src/textarea.js of the component vxe-textarea. The manipulation of the argument inputValue leads to cross site scripting...

5.3CVSS3.6AI score0.00345EPSS
SaveExploits0References5
CVE
CVE
•added 2024/05/24 6:00 a.m.•157 views

CVE-2023-1001

The CVE-2023-1001 entry concerns xuliangzhan vxe-table (up to 3.7.9) where the textarea.js export function inputValue is vulnerable to cross-site scripting. The vulnerability is exploitable remotely and is caused by improper handling of inputValue in the vxe-textarea component. Upgrade to version...

5.3CVSS3.6AI score0.00345EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/24 12:00 a.m.•7 views

CVE-2023-1001: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in xuliangzhan vxe-table up to 3.7.9. This issue affects the function export of the file packages/textarea/src/textarea.js of the component vxe-textarea. The manipulation of the argument inputValue leads to cross site scripting...

5.3CVSS3.7AI score0.00345EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/05/24 12:00 a.m.•38 views

PT-2024-11932

Name of the Vulnerable Software and Affected Versions xuliangzhan vxe-table versions up to 3.7.9 Description A problematic issue has been found in the function export of the file packages/textarea/src/textarea.js of the component vxe-textarea. The manipulation of the argument inputValue leads to...

5.3CVSS4.3AI score0.00345EPSS
SaveExploits0References12
CNNVD
CNNVD
•added 2023/05/13 12:00 a.m.•16 views

vxe-table 跨站脚本漏洞

vxe-table is a vue-based form/table component for PC. A cross-site scripting vulnerability exists in vxe-table version 3.7.9 and earlier, which stems from a cross-site scripting vulnerability in packages/textarea/src/textarea.js...

5.3CVSS4.5AI score0.00345EPSS
SaveExploits0References6
Rows per page
Query Builder