CVE-2015-1866

CVE-2015-1866 describes a cross-site scripting (XSS) vulnerability present in Ember.js versions 1.10.x prior to 1.10.1 and 1.11.x prior to 1.11.2. This medium-severity vulnerability, with a CVSS v3 score of 6.1, allows an unauthenticated attacker to inject malicious scripts into a user's browser, requiring user interaction (e.g., clicking a malicious link) to achieve low impact on confidentiality and integrity. There is no evidence of active exploitation, publicly available exploit code in common databases like Metasploit or ExploitDB, nor significant community discussion or media coverage surrounding this CVE.