CVE-2022-25869: Angularjs

Medium severity, CVSS 6.1. EPSS: 7.7% chance of exploitation in the next 30 days.

All versions of the package angular; all versions of the package angularjs.core; all versions of the package angularjs are vulnerable to Cross-site Scripting (XSS) due to insecure page caching in the Internet Explorer browser, which allows interpolation of <textarea> elements.

Affected products

• Angularjs Angularjs: any version

Published 2022-07-15. Last modified 2026-06-17.