All vulnerabilities

Servers and applications

CVE-2024-45047

Potential XSS vulnerability due to improper HTML attribute escaping

Severity
Medium 5.4
Published
30 Aug 2024
Last changed
30 Aug 2024
Added to UpHeron
3 Nov 2026
Fixed in
4.2.19
Also known as
GHSA-8266-84wp-wv5c
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
SvelteServers and applications · github:sveltejs/svelte
  • Every version before 4.2.19

References