https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 19:15:59 +0000 https://cve.radiocsirt.org/vuln/cve-2025-8082 <p><strong>Affected:</strong> Vuetify</p> <p>Improper neutralization of the title date in the &#39;VDatePicker&#39; component in Vuetify, allows unsanitized HTML to be inserted into the page. This can lead to a Cross-Site Scripting (XSS) https://owasp.org/www-community/attacks/xss  attack. The vulnerability occurs because the &#39;title-date-format&#39; property of the &#39;VDatePicker&#39; can accept a user created function and assign its output to the &#39;innerHTML&#39; property of the title element without sanitization.</p> <p>This issue affects Vuetify versions greater than or equal to 2.0.0 and less than 3.0.0.</p> <p>Note: Version 2.x of Vuetify is End-of-Life and will not receive any updates to address this issue. For more information see here https://v2.vuetifyjs.com/en/about/eol/ .</p> <p><strong>Affected:</strong> Vuetify</p> <p>Improper neutralization of the title date in the &#39;VDatePicker&#39; component in Vuetify, allows unsanitized HTML to be inserted into the page. This can lead to a Cross-Site Scripting (XSS) https://owasp.org/www-community/attacks/xss  attack. The vulnerability occurs because the &#39;title-date-format&#39; property of the &#39;VDatePicker&#39; can accept a user created function and assign its output to the &#39;innerHTML&#39; property of the title element without sanitization.</p> <p>This issue affects Vuetify versions greater than or equal to 2.0.0 and less than 3.0.0.</p> <p>Note: Version 2.x of Vuetify is End-of-Life and will not receive any updates to address this issue. For more information see here https://v2.vuetifyjs.com/en/about/eol/ .</p> https://cve.radiocsirt.org/vuln/cve-2025-8082