GHSA-w46j-8hm6-h8mm
XSS in apexcharts
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | apexcharts | < 3.24.0 | 3.24.0 |
Details
As written in the advisory (Markdown source, shown as plain text).
The package apexcharts before 3.24.0 are vulnerable to Cross-site Scripting (XSS) via lack of sanitization of graph legend fields.
References
External links from the advisory. They lead to third-party sites.
- https://nvd.nist.gov/vuln/detail/CVE-2021-23327
- https://github.com/apexcharts/apexcharts.js/pull/2158
- https://github.com/apexcharts/apexcharts.js/commit/68f3f34d125719b4767614fe0a595cc65bde1d19
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1070616
- https://snyk.io/vuln/SNYK-JS-APEXCHARTS-1062708
- https://www.npmjs.com/package/apexcharts