-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from Layui's path resolution logic in getPath() where doc.currentScript was trusted without proper validation. The patch adds a tagName check (doc.currentScript.tagName.toUpperCase() === 'SCRIPT') to prevent DOM clobbering. This matches the CVE description of DOM clobbering via name attributes and the commit diff modifying this exact code path. The function's role in determining script locations makes it a critical gadget for XSS exploitation when manipulated through injected HTML elements.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| layui | npm | < 2.9.17 | 2.9.17 |
JavaScriptJavaScriptOngoing coverage of React2Shell