Lucene search
Veracode Vulnerability DatabaseVERACODE:35255HistoryApr 26, 2022 - 10:20 a.m.
Cross-site Scripting (XSS)
2022-04-2610:20:47
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
14
cross-site scripting
vulnerability
javascript injection
el-table-column
software
EPSS
0.001
Percentile
34.5%
element-plus is vulnerable to cross-site scripting(XSS) attacks. The library does not properly sanitize the popperContent parameter in renderContent function, allowing an attacker to inject and execute malicious javascript via el-table-column.
Related
nvd
nvd
CVE-2022-27103
2022-04-25 13:15:49
osv
osv
element-plus vulnerable to cross-site scripting (XSS) via el-table-column
2022-04-26 00:00:42
CVE-2022-27103
2022-04-25 13:15:49
prion
prion
Cross site scripting
2022-04-25 13:15:00
cve
cve
CVE-2022-27103
2022-04-25 13:15:49
github
github
element-plus vulnerable to cross-site scripting (XSS) via el-table-column
2022-04-26 00:00:42
cvelist
cvelist
CVE-2022-27103
2022-04-25 12:11:09