Lucene search
+L

8 matches found

Veracode
Veracode
•added 2023/02/24 5:29 a.m.•26 views

Cross-Site Scripting (XSS)

@toast-ui/chart is vulnerable to Cross-Site Scripting XSS. The vulnerability exists because the renderTooltip function in tooltip.ts does not properly sanitize the legend fields which allows an attacker to inject and execute arbitrary JavaScript into the browser...

6.1CVSS3AI score0.0053EPSS
SaveExploits0References6Affected Software1
OSV
OSV
•added 2021/02/11 8:47 p.m.•76 views

GHSA-W46J-8HM6-H8MM XSS in apexcharts

The package apexcharts before 3.24.0 are vulnerable to Cross-site Scripting XSS via lack of sanitization of graph legend fields...

6.3CVSS6.1AI score0.0137EPSS
SaveExploits1References6
NVD
NVD
•added 2021/02/09 8:15 a.m.•51 views

CVE-2021-23327

The package apexcharts before 3.24.0 are vulnerable to Cross-site Scripting XSS via lack of sanitization of graph legend fields...

6.3CVSS0.0137EPSS
SaveExploits1References4
Prion
Prion
•added 2021/02/09 8:15 a.m.•35 views

Cross site scripting

The package apexcharts before 3.24.0 are vulnerable to Cross-site Scripting XSS via lack of sanitization of graph legend fields...

4.3CVSS6AI score0.0137EPSS
SaveExploits1References4Affected Software1
Mend
Mend
•added 2021/02/09 8:10 a.m.•2 views

CVE-2021-23327

The package apexcharts before 3.24.0 are vulnerable to Cross-site Scripting XSS via lack of sanitization of graph legend fields...

6.3CVSS0.0137EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2021/02/09 12:00 a.m.•3 views

PT-2021-15436

Name of the Vulnerable Software and Affected Versions apexcharts versions prior to 3.24.0 Description The issue is related to a lack of sanitization of graph legend fields, which can lead to Cross-site Scripting XSS. Recommendations For versions prior to 3.24.0, update to version 3.24.0 or later ...

6.3CVSS5.8AI score0.0137EPSS
SaveExploits1References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/02/09 12:00 a.m.•17 views

CVE-2021-23327: Improper Neutralization of Input During Web Page Generation

The package apexcharts before 3.24.0 are vulnerable to Cross-site Scripting XSS via lack of sanitization of graph legend fields...

6.3CVSS5.8AI score0.0137EPSS
SaveExploits1References2
Snyk
Snyk
•added 2021/01/20 11:02 a.m.•9 views

Cross-site Scripting (XSS)

Overview apexcharts is a modern JavaScript charting library to build interactive charts and visualizations with simple API. Affected versions of this package are vulnerable to Cross-site Scripting XSS via lack of sanitization of graph legend fields. Details Cross-site scripting or XSS is a code...

6.3CVSS5.3AI score0.0137EPSS
SaveExploits1References3
Rows per page
Query Builder