Description
billboard.js before 4.1.3 allows an attacker to execute malicious JavaScript due to improper sanitization of series ids during legend template rendering.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| NAVER | billboard.js | — | 4.1.3 |
Medium · 6.1
CVE-2026-120988
EUVD-2026-115726GHSA-qwgf-vfr8-c8w3
billboard.js before 4.1.3 allows an attacker to execute malicious JavaScript due to improper sanitization of series ids during legend templ…
Published Nov 3, 2026 · Updated Nov 3, 2026 · Assigned by naver