Svelte — CWE-Other

All Frameworks › Svelte › CWE-Other

1 CVEs categorized as CWE-Other — Uncategorized in Svelte.

CVE-2022-25875MEDIUM2022

The package svelte before 3.49.0 are vulnerable to Cross-site Scripting (XSS) due to improper input sanitization and to improper escape of attributes when using objects during SSR (Server-Side Rendering). Exploiting this vulnerability is possible via objects with a custom toString() function.