CVE-2026-120988

The billboard.js library, specifically versions before 4.1.3 , is vulnerable to a Cross-Site Scripting (XSS) flaw (CWE-79 ). The root cause is the improper sanitization of series ids during the rendering of the legend template, which allows an attacker to execute malicious JavaScript. No specific...

EUVD-2026-115726

billboard.js before 4.1.3 allows an attacker to execute malicious JavaScript due to improper sanitization of series ids during legend template rendering...

CVE-2026-120988

billboard.js before 4.1.3 allows an attacker to execute malicious JavaScript due to improper sanitization of series ids during legend template rendering...