CVE-2026-17528

Name of the Vulnerable Software and Affected Versions nice-select2 versions prior to 2.4.1

Description Cross-site Scripting (XSS) occurs via the <select> element. An attacker can provide a malicious payload that is rendered directly into the Document Object Model (DOM)—the programming interface for HTML and XML documents—without proper sanitization. This allows for the execution of arbitrary scripts in the browser of a user who views or interacts with the affected page.

Recommendations Update nice-select2 to version 2.4.1 or later.