6.8 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
32.7%
The Chartkick gem through 3.3.2 for Ruby allows Cascading Style Sheets (CSS) Injection (without attribute).
github.com/ankane/chartkick
github.com/ankane/chartkick/issues/546