Threats tagged 'ghsa-xp46-h5hf-pxx8'

A cross-site scripting (XSS) vulnerability exists in Argilla up to version 2.8.0 in an unknown function within the Sandbox.vue component. The vulnerability arises from improper handling of the 'template' argument, allowing remote attackers to execute script code. The issue has been publicly disclosed, but no official response or patch has been provided by the project at this time. The vulnerability has a low CVSS score of 2.4 and requires high privileges and user interaction for exploitation.