Cross Site Scripting (XSS)

Overview Affected versions of plotly.js are vulnerable to cross-site scripting if an attacker can convince a user to visit a malicious plot on a site using this package. Recommendation Update to 1.16.0 or later. References - Plot.ly Help - XSS Advisory - Jared Folkins - How I Hacked Plot.ly -...