Vulnerabilities

TI-2024-31457 CVE-2024-47075 · GHSA-j827-6rgf-9629

DOM Clobbering gadgets found in layui that lead to Cross-site Scripting

LOW 28

LayUI is a native minimalist modular Web UI component library.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00339 Published 2024-09-26 Fixed in 2.9.17 CWE-79

TI-2023-27620 CVE-2023-50550 · GHSA-rcvr-8whx-3m5p

LOW 24

layui up to v2.74 was discovered to contain a cross-site scripting (XSS) vulnerability via the data-content parameter.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00283 Published 2023-12-30 Fixed in 2.7.5 CWE-79

TI-2023-03448 CVE-2023-3691 · GHSA-hx4h-676r-j3qp

LOW 28

A vulnerability, which was classified as problematic, was found in layui up to v2.8.0-rc.16.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00534 Published 2023-07-16 Fixed in 2.8.0 CWE-79