medium6.3
CVE-2021-23327
The package apexcharts before 3.24.0 are vulnerable to Cross-site Scripting (XSS) via lack of sanitization of graph legend fields.
Impact
The package apexcharts before 3.24.0 are vulnerable to Cross-site Scripting (XSS) via lack of sanitization of graph legend fields.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fusioncharts | Apexcharts | before 3.24.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/apexcharts/apexcharts.js/commit/68f3f34d125719b4767614fe0a595cc65bde1d19
- https://github.com/apexcharts/apexcharts.js/pull/2158
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1070616
- https://snyk.io/vuln/SNYK-JS-APEXCHARTS-1062708
- https://github.com/apexcharts/apexcharts.js/commit/68f3f34d125719b4767614fe0a595cc65bde1d19
- https://github.com/apexcharts/apexcharts.js/pull/2158
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1070616
- https://snyk.io/vuln/SNYK-JS-APEXCHARTS-1062708