Threats tagged 'ghsa-qwgf-vfr8-c8w3'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-120988billboard.js before 4.1.3 allows an attacker to execute malicious JavaScript due to improper sanitization of series High2026-11-03GCVE DatabaseCVE-2026-120988 billboard.js versions before 4.1.3 contain a vulnerability that allows execution of malicious JavaScript due to improper sanitization of series IDs during legend template rendering. This flaw can lead to cross-site scripting (XSS) attacks if untrusted input is used in series IDs. Report on CVE-2026-120988 Vulnerability CWE-79 #ghsa-qwgf-vfr8-c8w3	GCVE Database	2026-11-03

Page 1 of 1