Skip to content
OpenAdvisories

Package · npm

element-plus

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.4
    CVE-2025-57665

    Element Plus Link component (el-link) implements insufficient input validation for the href attribute

    Element Plus Link component (el-link) through 2.10.6 implements insufficient input validation for the href attribute, creating a security abstraction gap that obscures URL-based attack vectors. The component passes user-controlled href values directly to unde…

    element-plus npm
  • Medium 6.1
    CVE-2022-27103

    element-plus vulnerable to cross-site scripting (XSS) via el-table-column

    element-plus 2.0.5 is vulnerable to Cross Site Scripting (XSS) via el-table-column.

    element-plus npm