← Back

Select2

select2

Vendor: Select2 • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Select2
1Select2
Nov 21, 2024
Mar 27, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
In Select2 through 4.0.5, as used in Snipe-IT and other products, rich selectlists allow XSS. This affects use cases with Ajax remote data loading when HTML templates are used to display listbox data.