Description
layui up to v2.74 was discovered to contain a cross-site scripting (XSS) vulnerability via the data-content parameter.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | layui | < 2.7.5 | 2.7.5 | GHSA-rcvr-8whx-3m5p |
Medium · 5.4
CVE-2023-50550
EUVD-2023-3288GHSA-rcvr-8whx-3m5p
Layui cross-site scripting (XSS) vulnerability
Published Dec 30, 2023 · Updated Aug 2, 2024 · Assigned by mitre