CVE-2026-102756 DataEase bar-horizontal Axis Label Tooltip Stored Cross-Site Scripting

DataEase is an open source data visualization and analysis tool. Prior to 2.10.26, authenticated users who can edit dataset fields and chart configuration can store an HTML-bearing dimension value in a bar-horizontal chart. When lengthLimit truncates the category axis label,...

CVE-2026-102756 DataEase bar-horizontal Axis Label Tooltip Stored Cross-Site Scripting

DataEase is an open source data visualization and analysis tool. Prior to 2.10.26, authenticated users who can edit dataset fields and chart configuration can store an HTML-bearing dimension value in a bar-horizontal chart. When lengthLimit truncates the category axis label,...

CVE-2026-102756

The open-source data visualization tool DataEase is vulnerable to Stored Cross-Site Scripting (XSS) in versions prior to 2.10.26 . Authenticated users with permissions to edit dataset fields and chart configurations can inject HTML-bearing dimension values into a bar-horizontal chart . The vulner...

CVE-2026-102756 DataEase bar-horizontal Axis Label Tooltip Stored Cross-Site Scripting

DataEase is an open source data visualization and analysis tool. Prior to 2.10.26, authenticated users who can edit dataset fields and chart configuration can store an HTML-bearing dimension value in a bar-horizontal chart. When lengthLimit truncates the category axis label,...

PT-2026-113945

Name of the Vulnerable Software and Affected Versions DataEase versions prior to 2.10.26 Description Authenticated users with permissions to edit dataset fields and chart configurations can inject HTML into a dimension value within a bar-horizontal chart. When the lengthLimit truncates the catego...