Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The HTMLSanitizer class in html-sanitizer.ts in all released versions of the Aurelia framework 1.x repository is vulnerable to XSS. The sanitizer only attempts to filter SCRIPT elements, which makes it feasible for remote attackers to conduct XSS attacks via (for example) JavaScript code in an attribute of various other elements. An attacker might also exploit a bug in how the SCRIPT string is processed by splitting and nesting them for example.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Aurelia framework 跨站脚本漏洞
Vulnerability Description
Aurelia framework是一个前端JavaScript框架，用于构建浏览器、移动和桌面应用程序。 Aurelia framework 存在跨站脚本漏洞。远程攻击者可以通过各种其它元素的属性中的JavaScript代码进行XSS攻击。
CVSS Information
N/A
Vulnerability Type
N/A