zlgxzswjy/BUI-select-xss

zlgxzswjy/BUI-select-xss

GitHubGitHub
GitHubgithub.com
Releases0
cve-2018-8108
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2018-8108↗
—4.3 MEDIUM

The select component in bui through 2018-03-13 has XSS because it performs an escape operation on already-escaped text, as demonstrated by workGroupList text.