← All advisories

Medium severity6.1NVD Advisory· Published Dec 12, 2022· Updated Jun 17, 2026

CVE-2022-4413

CVE-2022-4413

Description

Cross-site Scripting (XSS) - Reflected in GitHub repository nuxt/framework prior to v3.0.0-rc.13.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

15

GitHub/nuxt/frameworkllm-create
Range: <3.0.0-rc.13
Nuxt/frameworkllm-fuzzy14 versions
<3.0.0-rc.13+ 13 more
- (no CPE)range: <3.0.0-rc.13
- (no CPE)range: unspecified
- cpe:2.3:a:nuxt:framework:3.0.0:rc1:*:*:*:*:*:*
- cpe:2.3:a:nuxt:framework:3.0.0:rc10:*:*:*:*:*:*
- cpe:2.3:a:nuxt:framework:3.0.0:rc11:*:*:*:*:*:*
- cpe:2.3:a:nuxt:framework:3.0.0:rc12:*:*:*:*:*:*
- cpe:2.3:a:nuxt:framework:3.0.0:rc2:*:*:*:*:*:*
- cpe:2.3:a:nuxt:framework:3.0.0:rc3:*:*:*:*:*:*
- cpe:2.3:a:nuxt:framework:3.0.0:rc4:*:*:*:*:*:*
- cpe:2.3:a:nuxt:framework:3.0.0:rc5:*:*:*:*:*:*
- cpe:2.3:a:nuxt:framework:3.0.0:rc6:*:*:*:*:*:*
- cpe:2.3:a:nuxt:framework:3.0.0:rc7:*:*:*:*:*:*
- cpe:2.3:a:nuxt:framework:3.0.0:rc8:*:*:*:*:*:*
- cpe:2.3:a:nuxt:framework:3.0.0:rc9:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

2

github.com/nuxt/framework/commit/253c8f7ee0c0c580c44dedbe9387646264e90a1envdPatchThird Party Advisory
huntr.dev/bounties/70ac720d-c932-4ed3-98b1-dd2cbcb90185nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.