Nice Select2
1 CVEs
product
Monthly
Cross-site scripting in nice-select2 before 2.4.1 allows attackers to inject arbitrary scripts via malicious <select> element content that is rendered unsanitized into the DOM. Vulnerable if the application reflects user-controlled data into a <select> element that is transformed by nice-select2. User interaction required; no public exploit or active exploitation known.
XSS
N A
Nice Select2
NVD
GitHub
CVSS 4.0
5.3
EPSS
0.2%
EPSS 0%
CVSS 5.3
MEDIUM
PATCH
This Month
Cross-site scripting in nice-select2 before 2.4.1 allows attackers to inject arbitrary scripts via malicious <select> element content that is rendered unsanitized into the DOM. Vulnerable if the application reflects user-controlled data into a <select> element that is transformed by nice-select2. User interaction required; no public exploit or active exploitation known.
XSS
N A
Nice Select2
NVD
GitHub