Skip to content

Vendor

mskocik vulnerabilities

1 published CVE affecting mskocik, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0
Atom feed of mskocik alerts

Products

Latest mskocik CVEs

Newest publication first

  1. CVE-2023-38687 Execution of arbitrary JavaScript from Svelecte item names

    Published
    MediumCVSS 5.4 EPSS 0.52%

    Svelecte is a flexible autocomplete/select component written in Svelte. Svelecte item names are rendered as raw HTML with no escaping. This allows the injection of arbitrary HTML into the Svelecte dropdown. This can be exploited to execute arbitrary JavaScript whenever a Svelecte...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.