Element-plus Element-plus vulnerabilities

• element-plus Element Plus Link component (el-link) implements insufficient input validation for the href attribute CVE-2025-57665 6.4 MediumSeptember 9, 2025
• element-plus element-plus vulnerable to cross-site scripting (XSS) via el-table-column CVE-2022-27103 Fix available 6.1 MediumApril 25, 2022