CVE-2023-3691

Published: Jul 16, 2023Modified: Jun 17, 2026

6.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

A vulnerability, which was classified as problematic, was found in layui up to v2.8.0-rc.16. This affects an unknown part of the component HTML Attribute Handler. The manipulation of the argument title leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 2.8.0 is able to address this issue. It is recommended to upgrade the affected component. The identifier VDB-234237 was assigned to this vulnerability.

Affected (20)

Products: Layui: Layui

Layui

1 product

Layui

Configuration A

20 vulnerable

Vulnerable Software	Affected Versions
Layui Layui	Before 2.8.0
Layui Layui	Version 2.8.0 beta1
Layui Layui	Version 2.8.0 beta2
Layui Layui	Version 2.8.0 beta3
Layui Layui	Version 2.8.0 rc10
Layui Layui	Version 2.8.0 rc11
Layui Layui	Version 2.8.0 rc12
Layui Layui	Version 2.8.0 rc13
Layui Layui	Version 2.8.0 rc14
Layui Layui	Version 2.8.0 rc15
Layui Layui	Version 2.8.0 rc16
Layui Layui	Version 2.8.0 rc1
Layui Layui	Version 2.8.0 rc2
Layui Layui	Version 2.8.0 rc3
Layui Layui	Version 2.8.0 rc4
Layui Layui	Version 2.8.0 rc5
Layui Layui	Version 2.8.0 rc6
Layui Layui	Version 2.8.0 rc7
Layui Layui	Version 2.8.0 rc8
Layui Layui	Version 2.8.0 rc9