Element Plus
by Element Plus
Source repositories
CVEs (2)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2025-57665 | Med | 0.35 | 6.4 | 0.00 | Sep 9, 2025 | Element Plus Link component (el-link) through 2.10.6 implements insufficient input validation for the href attribute, creating a security abstraction gap that obscures URL-based attack vectors. The component passes user-controlled href values directly to underlying anchor… | ||
| CVE-2022-27103 | Med | 0.33 | 6.1 | 0.01 | Apr 25, 2022 | element-plus 2.0.5 is vulnerable to Cross Site Scripting (XSS) via el-table-column. |
- risk 0.35cvss 6.4epss 0.00
Element Plus Link component (el-link) through 2.10.6 implements insufficient input validation for the href attribute, creating a security abstraction gap that obscures URL-based attack vectors. The component passes user-controlled href values directly to underlying anchor…
- risk 0.33cvss 6.1epss 0.01
element-plus 2.0.5 is vulnerable to Cross Site Scripting (XSS) via el-table-column.