This vulnerability in Google Visualization Charts (<= 0.1) involves improper neutralization of input during web page generation, leading to stored cross-site scripting (XSS). An attacker could inject malicious scripts that persist and execute when other users view the affected charts. The CVSS vector indicates network attack vector, low attack complexity, requiring privileges and user interaction, with impacts on confidentiality, integrity, and availability rated as low to low and low respectively. No vendor advisory or patch links are available, and the product is not a cloud service.

Successful exploitation could allow an attacker to execute arbitrary scripts in the context of users viewing the vulnerable charts, potentially leading to data theft, session hijacking, or other impacts on confidentiality, integrity, and availability. The CVSS score of 6.5 reflects a medium severity with some required privileges and user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should consider limiting exposure to untrusted input in Google Visualization Charts and apply standard XSS mitigations in their environment. No official patch or workaround has been published at this time.