medium6.1
CVE-2020-16254
The Chartkick gem through 3.3.2 for Ruby allows Cascading Style Sheets (CSS) Injection (without attribute).
Impact
The Chartkick gem through 3.3.2 for Ruby allows Cascading Style Sheets (CSS) Injection (without attribute).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Chartkick Project | Chartkick | through 3.3.2 |