CVE-2024-33665

Medium severity, CVSS 6.1. EPSS: 0.5% chance of exploitation in the next 30 days.

angular-translate through 2.19.1 allows XSS via a crafted key that is used by the translate directive. NOTE: the vendor indicates that there is no documentation indicating that a key is supposed to be safe against XSS attacks.

Published 2024-04-26. Last modified 2026-06-17.