Description
The package apexcharts before 3.24.0 are vulnerable to Cross-site Scripting (XSS) via lack of sanitization of graph legend fields.
Recommendation
Update the apexcharts package to the latest compatible version. Followings are version details:
- Affected version(s): < 3.24.0
- Patched version(s): 3.24.0
References
Could your website be exposed too?
SmartScanner can check your website for XSS in apexcharts and gives you actionable findings to investigate.
Start a free scanRelated Issues
- Reflected XSS when using flashMessages or languageDictionary - CVE-2021-32641
- jquery.terminal self XSS on user input - CVE-2021-43862
- XSS in `*Text` options of the Datepicker widget in jquery-ui - CVE-2021-41183
- XSS vulnerability allowing arbitrary JavaScript execution - CVE-2021-41174
You might also like:
See something that needs correcting? Let us knowUpdated September 12, 2023


