Skip to content
OpenAdvisories
Medium · 6.3 CVE-2021-23327 EUVD-2021-0572GHSA-w46j-8hm6-h8mm

Cross-site Scripting (XSS)

Published Feb 9, 2021 · Updated Sep 17, 2024 · Assigned by snyk

Description

The package apexcharts before 3.24.0 are vulnerable to Cross-site Scripting (XSS) via lack of sanitization of graph legend fields.

Affected products

VendorProductAffectedFixed
— apexcharts unspecified – < 3.24.0 3.24.0

Affected packages

EcosystemPackageAffectedFixedRecord
npm apexcharts < 3.24.0 3.24.0 GHSA-w46j-8hm6-h8mm

References