Description (CNA)
The package apexcharts before 3.24.0 are vulnerable to Cross-site Scripting (XSS) via lack of sanitization of graph legend fields.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / apexcharts | affected unspecified before 3.24.0 |
CWE
No CWE identifiers supplied.
References
- https://snyk.io/vuln/SNYK-JS-APEXCHARTS-1062708
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1070616
- https://github.com/apexcharts/apexcharts.js/commit/68f3f34d125719b4767614fe0a595cc65bde1d19
- https://github.com/apexcharts/apexcharts.js/pull/2158
ADP enrichment
No English description supplied.