CyberRota Analysis
AI-GeneratedVersions of the nice-select2 package prior to 2.4.1 are susceptible to Cross-site Scripting (XSS) vulnerabilities through the <select> element. This flaw allows attackers to inject malicious scripts that execute in the victim's browser, potentially compromising user data and session integrity. Web developers and organizations utilizing this package should prioritize updating to the latest version to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Versions of the package nice-select2 before 2.4.1 are vulnerable to Cross-site Scripting (XSS) via the <select> element. An attacker can supply a malicious payload that is rendered directly into the DOM without proper sanitization, causing arbitrary script execution in a victim’s browser when they view or interact with the affected page.