Export limit exceeded: 30292 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1

Export CSV
CVE-2016-10744

select2: XSS due to missing sanitization when HTML templates are used to display remotely-loaded data.

In Select2 through 4.0.5, as used in Snipe-IT and other products, rich selectlists allow XSS. This affects use cases with Ajax remote data loading when HTML templates are used to display listbox data.

CVSS 3.0 · 6.1 Medium EPSS 1.8% KEV · Not listed
Vendors
Select2
Products
Select2