Lucene search

Cross-Site Scripting in highcharts

🗓️ 25 Aug 2020 14:47:04Reported by GitHub Advisory DatabaseType

Versions of highcharts prior to 7.2.2 or 8.1.1 are vulnerable to Cross-Site Scripting (XSS). The package fails to sanitize href values and does not restrict URL schemes, allowing attackers to execute arbitrary JavaScript in a victim's browser if they click the link

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Vulners

Node

highcharts highchartsRange8.0.0–8.1.1

highcharts highchartsRange<7.2.2

Source	Link
github	www.github.com/highcharts/highcharts/issues/13559
snyk	www.snyk.io/vuln/SNYK-JS-HIGHCHARTS-571995
github	www.github.com/highcharts/highcharts/commit/55c39dd55f12ce8dfab84f8ec13ad81423bee9f5
github	www.github.com/advisories/GHSA-gr4j-r575-g665

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

25 Aug 2020 14:04Current

4.1Medium risk

Vulners AI Score4.1

CWE-79