Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2016-10744
4.3
MEDIUMCVSS v2
Published
March 27, 2019
Affected
3 projects
Assigned by
MITRE
Severity scale
010
Description
In Select2 through 4.0.5, as used in Snipe-IT and other products, rich selectlists allow XSS. This affects use cases with Ajax remote data loading when HTML templates are used to display listbox data.
select2/select2
GitHubSelect2 is a jQuery based replacement for select boxes. It supports searching, remote data sets, and infinite scrolling of results.
GitHubSelect2 is a jQuery based replacement for select boxes. It supports searching, remote data sets, and infinite scrolling of results.<= 4.0.5, < 4.0.6NVD
select2
NPM
