Описание
The package vuetify from 2.0.0-beta.4 and before 2.6.10 are vulnerable to Cross-site Scripting (XSS) due to improper input sanitization in the 'eventName' function within the VCalendar component.
Ссылки
- ExploitThird Party Advisory
- PatchThird Party Advisory
- Issue TrackingThird Party Advisory
- Third Party Advisory
- Third Party Advisory
- Third Party Advisory
- ExploitThird Party Advisory
- PatchThird Party Advisory
- Issue TrackingThird Party Advisory
- Third Party Advisory
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 2.0.1 (включая) до 2.6.10 (исключая)
Одно из
cpe:2.3:a:vuetifyjs:vuetify:*:*:*:*:*:*:*:*
cpe:2.3:a:vuetifyjs:vuetify:2.0.0:beta4:*:*:*:*:*:*
cpe:2.3:a:vuetifyjs:vuetify:2.0.0:beta5:*:*:*:*:*:*
cpe:2.3:a:vuetifyjs:vuetify:2.0.0:beta6:*:*:*:*:*:*
cpe:2.3:a:vuetifyjs:vuetify:2.0.0:beta7:*:*:*:*:*:*
cpe:2.3:a:vuetifyjs:vuetify:2.0.0:beta8:*:*:*:*:*:*
cpe:2.3:a:vuetifyjs:vuetify:2.0.0:beta9:*:*:*:*:*:*
EPSS
Процентиль: 66%
0.00526
Низкий
4.6 Medium
CVSS3
5.4 Medium
CVSS3
Дефекты
CWE-79
Связанные уязвимости
EPSS
Процентиль: 66%
0.00526
Низкий
4.6 Medium
CVSS3
5.4 Medium
CVSS3
Дефекты
CWE-79