Skip to content
OpenAdvisories

Package · npm

nextcloud-vue-collections

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High —
    GHSA-whv6-rj84-2vh2

    Cross-Site Scripting in nextcloud-vue-collections

    Versions of `nextcloud-vue-collections` prior to 0.4.2 are vulnerable to Cross-Site Scripting (XSS). The `v-tooltip` component has an insecure `defaultHTML` configuration that allows arbitrary JavaScript to be injected in the tooltip of a collection item. Thi…

    nextcloud-vue-collections npm