Lucene search
+L

10 matches found

PyPA
PyPA
added 2026/07/07 4:03 p.m.26 views

Apache Superset's chart visualization has a stored Cross-Site Scripting (XSS) vulnerability

A stored Cross-Site Scripting XSS vulnerability exists in Apache Superset's chart visualization. An authenticated user with permissions to edit charts can inject a malicious payload into a column's label. The payload is not properly sanitized and gets executed in the victim's browser when they...

5.4CVSS6.2AI score0.00683EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder