Threats tagged 'ghsa-c3j6-vwpc-wjgh'

A cross-site scripting (XSS) vulnerability exists in DataGear up to version 5.0.0 in the HtmlTplDashboardWidgetHtmlRenderer function of the Chart Name Handler component. This vulnerability allows remote attackers to manipulate the Title argument, potentially leading to XSS attacks. The vulnerability has been publicly disclosed, but the vendor has not responded or provided a fix. The CVSS score is low, indicating limited impact.