← Database

CVE-2022-25875

MEDIUM CVSS: 5.4 Published: 2022-07-12 Modified: 2026-06-17

Description

The package svelte before 3.49.0 are vulnerable to Cross-site Scripting (XSS) due to improper input sanitization and to improper escape of attributes when using objects during SSR (Server-Side Rendering). Exploiting this vulnerability is possible via objects with a custom toString() function.

Affected Platforms

Svelte Svelte

Weakness Type

CWE-79

References