CVE-2024-6783
23.07.2024, 15:15
A vulnerability has been discovered in Vue, that allows an attacker to perform XSS via prototype pollution. The attacker could change the prototype chain of some properties such as `Object.prototype.staticClass` or `Object.prototype.staticStyle` to execute arbitrary JavaScript code.
Vendor | Product | Version |
---|---|---|
vuejs | vue | 2.7.16 ≤ 𝑥 ≤ 2.7.16 |
𝑥
= Vulnerable software versions