GHSA-788m-pj96-7w2c
Cross-Site Scripting in fomantic-ui
Versions of fomantic-ui are vulnerable to Cross-Site Scripting. Lack of output encoding on the selection dropdowns can lead to user input being executed instead of printed as text.
Recommendation
Upgrade to version 2.7.0 or later.
What each source reports
GitHub AdvisoriesNo score
Cross-Site Scripting in fomantic-ui
Versions of fomantic-ui are vulnerable to Cross-Site Scripting. Lack of output encoding on the selection dropdowns can lead to user input being executed instead of printed as text.
Recommendation
Upgrade to version 2.7.0 or later.
- Record
GHSA-788m-pj96-7w2c- Weakness
- CWE-79
- Updated
- 2026-11-02
OSVNo score
Cross-Site Scripting in fomantic-ui
Versions of fomantic-ui are vulnerable to Cross-Site Scripting. Lack of output encoding on the selection dropdowns can lead to user input being executed instead of printed as text.
Recommendation
Upgrade to version 2.7.0 or later.
- Record
GHSA-788m-pj96-7w2c- Weakness
- CWE-79
- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
fomantic-uinpm | before 2.7.0 | 2.7.0 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
GHSA-788m-pj96-7w2c is a vulnerability with no CVSS score yet in fomantic-ui, published September 2, 2020. No source lists public exploit code. Fixed in fomantic-ui 2.7.0.