PatchTheCVElayui vulnerabilities and fixes
Recent CVEs affecting layui, with upgrade or downgrade steps. 3 tracked.
layui has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2024-09-26. Highest priority: CVE-2024-47075 (score 29/100).
- CVE-2024-47075 MEDIUM 6.4 UPGRADE LayUI is a native minimalist modular Web UI component library
- CVE-2023-50550 MEDIUM 5.4 UPGRADE layui up to v2.74 was discovered to contain a cross-site scripting (XSS) vulnerability via the data-content pa
- CVE-2023-3691 LOW 3.5 UPGRADE A vulnerability, which was classified as problematic, was found in layui up to v2.8.0-rc.16
FAQ
How do I fix layui vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is layui being exploited right now?
None of the tracked layui CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which layui CVE should I patch first?
CVE-2024-47075 currently ranks highest (29/100): LayUI is a native minimalist modular Web UI component library.