slim_select vulnerabilities

CVEs whose affected-version data names the slim_select package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2024-9440Medium· 5.4

1y ago

Slim Select 2.0 versions through 2.9.0 are affected by a potential cross-site scripting vulnerability

Slim Select 2.0 versions through 2.9.0 are affected by a potential cross-site scripting vulnerability. In select.ts:createOption(), the text variable from the user-provided Options object is assigned to an innerHTML without sanitation. S…

▾ Sunlitslimselectjs · slim_selectEPSS 0.36%via NVD