CVE-2026-124697

The Kendo UI for jQuery component contains a Cross-Site Scripting (XSS) vulnerability in the Chart shared-tooltip rendering functionality. The root cause is that the component treats bound category and series-name values as raw HTML. An attacker capable of influencing values consumed by an affect...