Skip to content
OpenAdvisories

Package · npm

svelecte

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2023-38687

    Execution of arbitrary JavaScript from Svelecte item names

    Svelecte is a flexible autocomplete/select component written in Svelte. Svelecte item names are rendered as raw HTML with no escaping. This allows the injection of arbitrary HTML into the Svelecte dropdown. This can be exploited to execute arbitrary JavaScrip…

    mskocik svelecte svelecte npm