CVE-2026-124698

Progress Kendo UI for jQuery contains a Cross-Site Scripting (XSS) vulnerability in the Chart default tooltip . The component fails to properly neutralize input, rendering point values as raw HTML. An attacker capable of influencing a string point value can inject markup that executes as JavaScri...