Headline
GHSA-q4q5-c5cv-2p68: Vuetify Cross-site Scripting vulnerability
The package vuetify from 2.0.0-beta.4 and before 2.6.10 are vulnerable to Cross-site Scripting (XSS) due to improper input sanitization in the ‘eventName’ function within the VCalendar component.
Vuetify Cross-site Scripting vulnerability
Moderate severity GitHub Reviewed Published Sep 19, 2022 • Updated Sep 21, 2022
Related news
CVE-2022-25873: Snyk Vulnerability Database | Snyk
The package vuetify from 2.0.0-beta.4 and before 2.6.10 are vulnerable to Cross-site Scripting (XSS) due to improper input sanitization in the 'eventName' function within the VCalendar component.