Threats tagged 'ghsa-4gc7-rcxg-3jx3'

A cross-site scripting (XSS) vulnerability exists in Argilla up to version 2.8.0 in a text field component. The vulnerability arises from improper handling of the 'text' argument in the file argilla-frontend/components/features/annotation/container/fields/text-field/TextField.vue. The flaw can be exploited remotely but requires user interaction and high privileges. The project has been notified but has not yet responded or issued a fix. Public exploit code is available.