← Database

CVE-2022-25873

MEDIUM CVSS: 4.6 Published: 2022-09-18 Modified: 2026-06-17

Description

The package vuetify from 2.0.0-beta.4 and before 2.6.10 are vulnerable to Cross-site Scripting (XSS) due to improper input sanitization in the 'eventName' function within the VCalendar component.

Affected Platforms

Vuetifyjs Vuetify

Weakness Type

CWE-79

References