| Package | Affected versions | Patched versions |
|---|---|---|
| element-plus | = 2.0.5 | |
| element-plus | < 2.0.6 | 2.0.6 |
element-plus below 2.0.5 is vulnerable to Cross Site Scripting (XSS) when attribute show-tooltips-overflow of el-table-column is true. The mouseover action will make the text of this column render as html.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free