p PatchFirst

PatchFirst · Latest vulnerabilities

wireui/wireui vulnerabilities

Vulnerabilities published for wireui/wireui in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerability: 1

  1. CVE-2024-45803

    Medium · CVSS 5.1EPSS 0.42%Fix available

    Cross site scripting (XSS) Vulnerability on route /wireui/button?label=Content in wireui

    Wire UI is a library of components and resources to empower Laravel and Livewire application development. A potential Cross-Site Scripting (XSS) vulnerability has been identified in the `/wireui/button` endpoint, specifically through the `label` query parameter. Malicious actors could exploit this vulnerability by injecting JavaScript into the `label` parameter, leading to the execution of arbitrary code in the victim's browser. The `/wireui/button` endpoint dynamically renders button labels based on user-provided input via the `label` query parameter. Due to insufficient sanitization or escaping of this input, an attacker can inject maliciou

    wireui/wireui wireui/wireuiPHP
    • Update to 1.19.3
    • Update to 2.1.3
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →