Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Select2 records in CISA KEVNo Select2 vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority LOW 31
In Select2 through 4.0.5, as used in Snipe-IT and other products, rich selectlists allow XSS.
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01762 · Published 2019-03-27 · Partial fix · 4.0.6 CWE-79
Open these records in search →