Description

Plotly, Inc. plotly.js versions prior to 1.16.0 are vulnerable to an XSS issue.

Remediation

References

http://help.plot.ly/security-advisories/2016-08-08-plotlyjs-xss-advisory/

Related Vulnerabilities

CVE-2016-8735 Vulnerability in maven package org.apache.tomcat:tomcat-catalina-jmx-remote

CVE-2014-0050 Vulnerability in maven package commons-fileupload:commons-fileupload

CVE-2019-1003080 Vulnerability in maven package org.jenkins-ci.plugins:openshift-deployer

CVE-2019-10080 Vulnerability in maven package org.apache.nifi:nifi-security-utils

CVE-2017-1000006 Vulnerability in npm package plotly.js

Severity

High

Classification

CWE-79 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Vendor Advisory