CVE-2025-57665 — Element Plus Link component (el-link) through 2.10.6 implements insufficient input validation for the href attribute, creating a security abstraction gap that obscures URL-based attack vectors. The co — CVE Database · The Intelligence Room