Lucene search
CVE-2023-38687 Execution of arbitrary JavaScript from Svelecte item names
Execution of arbitrary JavaScript from Svelecte item names. Svelecte vulnerability allows injection of arbitrary HTML into dropdown, leading to XSS attacks and potential execution of untrusted JavaScript
Show more
| Reporter | Title | Published | Views | Family All 7 |
|---|---|---|---|---|
 | Svelecte item names vulnerable to execution of arbitrary JavaScript | 14 Aug 202321:14 | – | osv |
 | Cross site scripting | 14 Aug 202321:15 | – | prion |
 | Cross Site Scripting (XSS) | 16 Aug 202300:42 | – | veracode |
 | CVE-2023-38687 | 14 Aug 202321:15 | – | nvd |
 | CVE-2023-38687 Execution of arbitrary JavaScript from Svelecte item names | 14 Aug 202320:21 | – | cvelist |
 | Svelecte item names vulnerable to execution of arbitrary JavaScript | 14 Aug 202321:14 | – | github |
 | CVE-2023-38687 | 14 Aug 202321:15 | – | cve |
[
{
"cpes": [
"cpe:2.3:a:mskocik:svelecte:*:*:*:*:*:node.js:*:*"
],
"vendor": "mskocik",
"product": "svelecte",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "3.16.3",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
}
]Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo14 Aug 2023 20:21Current
5.9Medium risk
Vulners AI Score5.9
CVSS35.4
SSVCNaN