Cross-site Scripting (XSS)

billboard.js is vulnerable to Cross-site Scripting XSS. The vulnerability is due to improper sanitization of user-controlled input during chart option binding, which allows an attacker to inject and execute malicious JavaScript code in the context of the application...

CVE-2026-1513

billboard.js before 3.18.0 allows an attacker to execute malicious JavaScript due to improper sanitization during chart option binding...

CVE-2026-1513

billboard.js before 3.18.0 allows an attacker to execute malicious JavaScript due to improper sanitization during chart option binding...