Lucene search
Veracode Vulnerability DatabaseVERACODE:37116HistorySep 19, 2022 - 4:48 a.m.
Cross-site Scripting (XSS)
2022-09-1904:48:01
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
18
vuetify
xss
vulnerability
vcalendar
component
javascript
injection
authenticated
attacker
0.001 Low
EPSS
Percentile
50.6%
vuetify is vulnerable to Cross-site Scripting (XSS). The library does not properly escape the user inputs through the eventName function within the VCalendar component, which allows an authenticated attacker to inject and execute malicious javascript.
Related
cve
cve
CVE-2022-25873
2022-09-18 15:15:09
github
github
Vuetify Cross-site Scripting vulnerability
2022-09-19 00:00:28
prion
prion
Cross site scripting
2022-09-18 15:15:00
nvd
nvd
CVE-2022-25873
2022-09-18 15:15:09
osv
osv
CVE-2022-25873
2022-09-18 15:15:09
Vuetify Cross-site Scripting vulnerability
2022-09-19 00:00:28
cvelist
cvelist
CVE-2022-25873 Cross-site Scripting (XSS)
2022-09-18 00:00:00