Moole Vulnerability Database

Find real vulnerabilities before they ship

Unknown

CVE-2021-23327

The package apexcharts before 3.24.0 are vulnerable to Cross-site Scripting (XSS) via lack of sanitization of graph legend fields.

PublishedFeb 09, 2021, 08:15

Published Byreport@snyk.io

Package (Ecosystem)IntroducedFixedLimit

apexcharts(npm)03.24.0N/A

CWE-79

Base Score

6.3

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Base SeverityMedium

Version

3.1

Attack Vector (AV)

NETWORK