---
title: Vue. Possible XSS Vector On Versions Under 2.4.3
description: "**Impact area** Security **Severity** Medium **Affected element** **ServiceNow** UI Script **Salesforce** Static Resource Rule number **SN-JSL-VUE-LESSTHAN-V243 **(for ServiceNow) **SF-JSL-VUE-LESSTHAN-V243 **(for Salesforce) ## Impact Affected versions of the package are vulnerable to Cross-site Scripting (XSS). Remediation Update vue JS library to the latest…"
url: "https://community-staging.qualityclouds.com/qcdocs/qc/vulnerabilities-in-open-source-libraries-salesforce/vue-possible-xss-vector-on-versions-under-2-4-3-2/"
updated: "2025-03-21"
category: Rules
---

# Vue. Possible XSS Vector On Versions Under 2.4.3

**Impact area**

Security

**Severity**

Medium

**Affected element**

**ServiceNow**

UI Script

**Salesforce**

Static Resource

Rule number

**SN-JSL-VUE-LESSTHAN-V243 **(for ServiceNow)

**SF-JSL-VUE-LESSTHAN-V243 **(for Salesforce)

## Impact

Affected versions of the package are vulnerable to Cross-site Scripting (XSS).

Remediation

Update vue JS library to the latest version.

**Time to fix**

30 min

## References

This rule is linked to [Common Weakness Enumeration CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting').](https://cwe.mitre.org/data/definitions/79.html).