EL
Product
Element-plus
by Element-plus · last CVE Sep 9, 2025
2
CVEs
0
On KEV
6.4
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 2Low 0
Watch

Add Element-plus to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-57665
6.4
0%
Sep 9
Element Plus Link component (el-link) through 2.10.6 implements insufficient input validation for the href attribute, creating a security abstraction gap that obscures URL-based…
Affected: through 2.10.6
CVE-2022-27103
6.1
1%
Apr 25
element-plus 2.0.5 is vulnerable to Cross Site Scripting (XSS) via el-table-column
Affected: 2.0.5
Showing 2