{"id":"CVE-2022-27103","details":"element-plus 2.0.5 is vulnerable to Cross Site Scripting (XSS) via el-table-column.","aliases":["GHSA-rjvg-8v36-xv9r"],"modified":"2026-08-12T03:51:44.323615233Z","published":"2022-04-25T12:11:09Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/27xxx/CVE-2022-27103.json","cna_assigner":"mitre"},"references":[{"type":"WEB","url":"https://github.com/asjdf/element-table-xss-test/"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/27xxx/CVE-2022-27103.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-27103"},{"type":"REPORT","url":"https://github.com/asjdf/element-table-xss-test/issues/1"},{"type":"REPORT","url":"https://github.com/element-plus/element-plus/issues/6514"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/element-plus/element-plus","events":[{"introduced":"531188ca1031e0ec6c326034e37dc2e42cbc6f7a"},{"last_affected":"531188ca1031e0ec6c326034e37dc2e42cbc6f7a"}],"database_specific":{"source":"CPE_STRING","cpe":"cpe:2.3:a:element-plus:element-plus:2.0.5:*:*:*:*:*:*:*","extracted_events":[{"introduced":"2.0.5"},{"last_affected":"2.0.5"}]}}],"versions":["2.0.5"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-27103.json"}}],"schema_version":"1.9.0"}