Description

Plotly, Inc. plotly.js versions prior to 1.16.0 are vulnerable to an XSS issue.

Remediation

References

http://help.plot.ly/security-advisories/2016-08-08-plotlyjs-xss-advisory/

Related Vulnerabilities

CVE-2023-24429 Vulnerability in maven package org.jenkins-ci.plugins:semantic-versioning-plugin

CVE-2022-22980 Vulnerability in maven package org.springframework.data:spring-data-mongodb

CVE-2017-7545 Vulnerability in maven package org.jbpm:jbpm-designer-backend

CVE-2019-3894 Vulnerability in maven package org.wildfly:wildfly-ee

CVE-2018-1000136 Vulnerability in npm package electron

Severity

High

Classification

CWE-79 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Vendor Advisory