Oleg Chuiev

**Name of the Vulnerable Software and Affected Versions** nice-select2 versions prior to 2.4.1 **Description** Cross-site Scripting (XSS) occurs via the `<select>` element. An attacker can provide a malicious payload that is rendered directly into the Document Object Model (DOM)—the programming interface for HTML and XML documents—without proper sanitization. This allows for the execution of arbitrary scripts in the browser of a user who views or interacts with the affected page. **Recommendations** Update nice-select2 to version 2.4.1 or later.