CVE-2019-15482

6.1 mediumEPSS 0.9%

Medium (6.1) in selectize-plugin-a11y project selectize-plugin-a11y. EPSS 0.9% chance of exploitation in the next 30 days. Fixed in selectize-plugin-a11y 1.1.0.

selectize-plugin-a11y before 1.1.0 has XSS via the msg field.

Severity

CVSS 3.0

6.1 medium

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 58% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2019-08-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

selectize-plugin-a11y_project:selectize-plugin-a11y

Packages (OSV)

Advisory	Ecosystem	Package	Affected	Fixed in
GHSA-8cpw-73f2-w58m	npm	selectize-plugin-a11y	<1.1.0	1.1.0

References

https://github.com/SLMNBJ/selectize-plugin-a11y/pull/9
https://www.npmjs.com/package/selectize-plugin-a11y/v/1.1.0
https://github.com/SLMNBJ/selectize-plugin-a11y/pull/9
https://www.npmjs.com/package/selectize-plugin-a11y/v/1.1.0

Check your stack JSON