Highcharts cross-site scripting vulnerability

Highcharts versions 1.0.0 through 4.2.2 contain a cross-site scripting vulnerability. This stems from unvalidated searches of the chartConstructor property, which may allow attackers to copy malicious options into container properties or features via control panel configuration. When these are...