CVE-2023-50550

MEDIUM5.4EPSS 0.42%

Layui cross-site scripting (XSS) vulnerability

發布日:2023/12/30修改日:2024/1/8

也稱為:GHSA-rcvr-8whx-3m5p

描述

layui up to v2.74 was discovered to contain a cross-site scripting (XSS) vulnerability via the data-content parameter.

受影響套件(1)

npm/layuifrom 0, < 2.7.5

CVSS 分數

來源	版本	嚴重程度	向量
osv	CVSS 3.1	MEDIUM5.4	CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

參考連結(4)