CVE-2021-23327

MEDIUM 6.3EPSS 1.4%

The package apexcharts before 3.24.0 are vulnerable to Cross-site Scripting (XSS) via lack of sanitization of graph legend fields.

CVSS v3.1: 6.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
CVSS v3.1: 6.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
CVSS v2.0: 4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS: 1.37% chance of exploitation in the next 30 days, 70th percentile
Published: 2021-02-09
Updated: 2024-09-17

Proof-of-concept exploits (1)

apexcharts/apexcharts.js/pull/2158

References

Related