Vulnerability GHSA-j3gg-r6gp-95q2
Medium Risk
MEDIUM RISK
CVSS Score: 6.0
Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
4 years ago
April 12, 2022 at 08:22 PM UTC
XSS in HEEx class attributes
1.0.0 - 3.0.3
1.0.0 - 3.0.3
Summary
XSS in HEEx class attributes
Details
The class attribute was not protected against XSS attacks when using HEEx.
References
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
8 hours ago
Phoenix.HTML vulnerable to attribute injection via unvalidated attribute names in attributes_escape/1
1.0.0 - 3.3.4 and 4.0.0 - 4.3.0 EEF-CVE-2026-117645
1.0.0 - 3.3.4 and 4.0.0 - 4.3.0 EEF-CVE-2026-117645
Medium Risk
3 years ago
phoenix_html allows Cross-site Scripting in HEEx class attributes
1.0.0 - 3.0.3 GHSA-5g2h-9x5v-5h3x
1.0.0 - 3.0.3 GHSA-5g2h-9x5v-5h3x
Impacted packages
Timeline
Published
4 years ago
April 12, 2022 at 08:22 PM UTC
Fixed (3.0.4)
5 years ago
September 23, 2021 at 07:28 AM UTC
Last Modified
1 month ago
September 10, 2026 at 03:49 AM UTC