The package vuetify from 2.0.0-beta.4 and before 2.6.10 are vulnerable to Cross-site Scripting (XSS) due to improper input sanitization in the 'eventName' function within the VCalendar component.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: snyk

Published: 2022-09-18T14:55:10.826445Z

Updated: 2024-09-17T03:28:38.073Z

Reserved: 2022-02-24T00:00:00

Link: CVE-2022-25873

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2022-09-18T15:15:09.660

Modified: 2024-11-21T06:53:08.890

Link: CVE-2022-25873

cve-icon Redhat

No data.