layui records
3 published records for vendor layui.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Attack profile
All records
3 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
24Monitor | CVE-2023-3691No exploit | layui HTML Attribute cross site scriptinglayui · layui · CWE-79 | Medium6.1 | — | 0.5% | Jul 16, 2023 |
24Monitor | CVE-2024-47075No exploit | DOM Clobbering gadgets found in layui that lead to Cross-site Scriptinglayui · layui · CWE-79 | Medium6.1 | — | 0.3% | Sep 26, 2024 |
21Monitor | CVE-2023-50550No exploit | layui up to v2.74 was discovered to contain a cross-site scripting (XSS) vulnerability via the data-content parameter.layui · layui · CWE-79 | Medium5.4 | — | 0.3% | Dec 30, 2023 |
- CVE-2023-369124Monitor
layui HTML Attribute cross site scripting
MediumCVSS 6.1No exploitEPSS 1%layui · layuiJul 16, 2023
- CVE-2024-4707524Monitor
DOM Clobbering gadgets found in layui that lead to Cross-site Scripting
MediumCVSS 6.1No exploitEPSS 0%layui · layuiSep 26, 2024
- CVE-2023-5055021Monitor
layui up to v2.74 was discovered to contain a cross-site scripting (XSS) vulnerability via the data-content parameter.
MediumCVSS 5.4No exploitEPSS 0%layui · layuiDec 30, 2023