Element-plus

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Element-plus records in CISA KEV

No Element-plus vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Element-plus 2 records HIGH

Records

2 records in Element-plus · all components

TI-2025-35599 CVE-2025-57665 · GHSA-5m5x-9j46-h678

Element Plus Link component (el-link) through 2.10.6 implements insufficient input…

HIGH 68

Element Plus Link component (el-link) through 2.10.6 implements insufficient input validation for the href attribute, creating a security abstraction gap that obscures URL-based attack vectors.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00236 Published 2025-09-09 No fix listed CWE-601

TI-2022-10256 CVE-2022-27103 · GHSA-rjvg-8v36-xv9r

element-plus 2.0.5 is vulnerable to Cross Site Scripting (XSS) via el-table-column.

LOW 29

element-plus 2.0.5 is vulnerable to Cross Site Scripting (XSS) via el-table-column.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00894 Published 2022-04-25 Fixed in 2.0.6 CWE-79

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0