CVE-2024-6783: Vue

Medium severity, CVSS 4.8. EPSS: 0.5% chance of exploitation in the next 30 days.

A vulnerability has been discovered in Vue, that allows an attacker to perform XSS via prototype pollution. The attacker could change the prototype chain of some properties such as `Object.prototype.staticClass` or `Object.prototype.staticStyle` to execute arbitrary JavaScript code.

Affected products

• Vue Vue: from 2.0.0, up to and including 2.7.16
• Vuejs Vue: from 2.0.0, up to and including 2.7.16

Published 2024-07-23. Last modified 2026-06-17.