CVE-2023-0410

MEDIUM

builderio/qwik < 0.16.2 - Cross-Site Scripting

Title source: llm

Cross-site Scripting (XSS) - Generic in GitHub repository builderio/qwik prior to 0.1.0-beta5.

Core 2

Core References

Patch, Third Party Advisory

Permissions Required, Third Party Advisory

CVSS v3 6.1

EPSS 0.0046

EPSS Percentile 36.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Vulnrichment

Exploitation poc

Automatable no

Technical Impact partial

CWE

CWE-79

Status published

Products (3)

builder/qwik < 0.16.2

builder.io/qwik 0 - 0.16.2npm

qwik/qwik < 0.16.2

Published Jan 20, 2023

Tracked Since Feb 18, 2026