{"action":"Upgrade element-plus to 2.0.6 or later.","affected":[{"fixed":"2.0.6","introduced":"0"}],"component":"element-plus","cve_ids":["CVE-2022-27103"],"ecosystem":"npm","epss":0.00894,"exploited":false,"fixed_versions":["2.0.6"],"ghsa_id":"GHSA-rjvg-8v36-xv9r","id":"tcs_01M5KG9BKVEENRAHHGTMZKTPPT","modified_at":"2023-11-08T04:08:55.964327Z","published_at":"2022-04-26T00:00:42Z","references":["https://osv.dev/vulnerability/GHSA-rjvg-8v36-xv9r","https://nvd.nist.gov/vuln/detail/CVE-2022-27103","https://github.com/asjdf/element-table-xss-test/issues/1","https://github.com/element-plus/element-plus/issues/6514","https://github.com/element-plus/element-plus/pull/6520","https://github.com/element-plus/element-plus/commit/063c56446135176971f532bd0eb2e88a0b137d43","https://github.com/asjdf/element-table-xss-test","https://github.com/element-plus/element-plus"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-rjvg-8v36-xv9r","url":"https://osv.dev/vulnerability/GHSA-rjvg-8v36-xv9r"}],"summary":"element-plus vulnerable to cross-site scripting (XSS) via el-table-column"}