CVE-2024-6783

MEDIUM

Vue 2.0.0-2.7.15 - Cross-Site Scripting via Prototype Pollution

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2024-6783. PoCs published by HORKimhab.

AI-analyzed exploit summary The repository contains only placeholder files (README.md, LICENSE, .gitignore, and a template file) with no actual exploit code or technical details about CVE-2024-6783. The README is a generic template with no specific information about the vulnerability.

Description

A vulnerability has been discovered in Vue, that allows an attacker to perform XSS via prototype pollution. The attacker could change the prototype chain of some properties such as `Object.prototype.staticClass` or `Object.prototype.staticStyle` to execute arbitrary JavaScript code.

Exploits (1)

github STUB
by HORKimhab · poc
https://github.com/HORKimhab/CVE-2024-6783

The repository contains only placeholder files (README.md, LICENSE, .gitignore, and a template file) with no actual exploit code or technical details about CVE-2024-6783. The README is a generic template with no specific information about the vulnerability.

Classification
Stub 95%
Attack Type
Other
Complexity
Trivial
Reliability
Theoretical
Target: unknown
No auth needed
devstral-2 · analyzed May 27, 2026 Full analysis →

References (3)

Core 3

Scores

CVSS v3 4.8
EPSS 0.0031
EPSS Percentile 54.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-79
Status published
Products (2)
npm/vue-template-compiler 2.0.0npm
vue/vue 2.0.0 - 2.7.16
Published Jul 23, 2024
Tracked Since Feb 18, 2026