Skip to content
Threat Feed
Subscribe

Product

Quasar Framework (< 2.22.0)

1 brief RSS
high advisory

Stored/Reflected XSS in Quasar Framework SSR via Unescaped Meta Tag Rendering

The Quasar Framework's server-side rendering (SSR) mechanism in versions prior to 2.22.0 fails to escape HTML characters in meta tags, allowing attackers to inject and execute arbitrary JavaScript in the victim's browser.

Quasar Framework
2t 1c