CVE-2017-1000006

Plotly, Inc. plotly.js versions prior to 1.16.0 are vulnerable to an XSS issue...

CVE-2017-1000006

Summary: CVE-2017-1000006 affects Plotly’s plotly.js versions prior to 1.16.0, introducing a cross-site scripting (XSS) vulnerability. Component/affected software: plotly.js (Plotly, Inc.). Root cause / nature: XSS in rendering of plots; vulnerable to injection that can lead to script execution i...