phoenixframework

Records9All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

phoenixframework records in CISA KEV

No phoenixframework vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Phoenix Html · all components

TI-2021-21540 CVE-2021-46871 · GHSA-5g2h-9x5v-5h3x

LOW 28

tag.ex in Phoenix Phoenix.HTML (aka phoenix_html) before 3.0.4 allows XSS in HEEx class attributes.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00434 Published 2023-01-10 Fixed in 3.0.4 CWE-79