layui

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

layui records in CISA KEV

No layui vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Layui · all components

TI-2024-31457 CVE-2024-47075 · GHSA-j827-6rgf-9629

LOW 28

LayUI is a native minimalist modular Web UI component library.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00339 Published 2024-09-26 Fixed in 2.9.17 CWE-79

TI-2023-03448 CVE-2023-3691 · GHSA-hx4h-676r-j3qp

LOW 28

A vulnerability, which was classified as problematic, was found in layui up to v2.8.0-rc.16.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00534 Published 2023-07-16 Fixed in 2.8.0 CWE-79

TI-2023-27620 CVE-2023-50550 · GHSA-rcvr-8whx-3m5p

LOW 24

layui up to v2.74 was discovered to contain a cross-site scripting (XSS) vulnerability via the data-content parameter.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00283 Published 2023-12-30 Fixed in 2.7.5 CWE-79