PYSEC-2026-4052 Home Assistant: XSS in Statistics Graph Card

Summary An authenticated party can add a malicious name to any statistics-capable entity, allowing for Cross-Site Scripting attacks against anyone who views a Statistics Graph card containing that entity, when they hover over any data point on the chart. Payload Payload triggering An alternative,...

Home Assistant: XSS in Statistics Graph Card

SummaryAn authenticated party can add a malicious name to any statistics-capable entity, allowing forCross-Site Scripting attacks against anyone who views a Statistics Graph card containing thatentity, when they hover over any data point on the chart.PayloadPayload triggeringAn alternative, and...

GHSA-WX4M-69M9-GX3M Home Assistant: XSS in Statistics Graph Card

Summary An authenticated party can add a malicious name to any statistics-capable entity, allowing for Cross-Site Scripting attacks against anyone who views a Statistics Graph card containing that entity, when they hover over any data point on the chart. Payload Payload triggering An alternative,...

Home Assistant: XSS in Statistics Graph Card

Summary An authenticated party can add a malicious name to any statistics-capable entity, allowing for Cross-Site Scripting attacks against anyone who views a Statistics Graph card containing that entity, when they hover over any data point on the chart. Payload Payload triggering An alternative,...