CVE-2016-10744

In Select2 through 4.0.5, as used in Snipe-IT and other products, rich selectlists allow XSS

published March 27, 2019

CVSS
—
EPSS
2%
Percentile
77.7
In the wild
Unconfirmed
What it is

In Select2 through 4.0.5, as used in Snipe-IT and other products, rich selectlists allow XSS. This affects use cases with Ajax remote data loading when HTML templates are used to display listbox data.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01762 · 77.7th percentile
Published
2019-03-27T03:54Z
EPSS history
Timeline
  • 27 MAR 03:54Z
    In Select2 through 4.0.5, as used in Snipe-IT and other products, rich selectlists allow XSS
    cvelistv5