GHSA-q4q5-c5cv-2p68MediumCVSS 5.4

Vuetify Cross-site Scripting vulnerability

Published
September 19, 2022
Last Modified
January 30, 2023

🔗 CVE IDs covered (1)

CVE-2022-25873 →

📋 Description

The package vuetify from 2.0.0-beta.4 and before 2.6.10 are vulnerable to Cross-site Scripting (XSS) due to improper input sanitization in the 'eventName' function within the VCalendar component.

🎯 Affected products2

  • npm/vuetify:>= 2.0.0-beta.4, < 2.6.10
  • maven/org.webjars.npm:vuetify:>= 2.0.0-beta.4, < 2.6.10

🔗 References (8)