What is GHSA-w46j-8hm6-h8mm?

GHSA-w46j-8hm6-h8mm is a security advisory published by GitHub Security Advisories with Medium severity. XSS in apexcharts

Which CVE IDs does GHSA-w46j-8hm6-h8mm cover?

GHSA-w46j-8hm6-h8mm covers the following CVE IDs: CVE-2021-23327. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-w46j-8hm6-h8mm?

GHSA-w46j-8hm6-h8mm has a CVSS v3 base score of 6.3, published by GitHub Security Advisories.

Which products are affected by GHSA-w46j-8hm6-h8mm?

GHSA-w46j-8hm6-h8mm affects 1 product, including: npm/apexcharts:\u003c 3.24.0.

GHSA-w46j-8hm6-h8mmMediumCVSS 6.3

XSS in apexcharts

Vendor

GitHub Security Advisories

Published

February 11, 2021

Last Modified

September 12, 2023

🔗 CVE IDs covered (1)

CVE-2021-23327 →

📋 Description

The package apexcharts before 3.24.0 are vulnerable to Cross-site Scripting (XSS) via lack of sanitization of graph legend fields.

🎯 Affected products1

npm/apexcharts:< 3.24.0

🔗 References (7)

https://nvd.nist.gov/vuln/detail/CVE-2021-23327
https://github.com/apexcharts/apexcharts.js/pull/2158
https://github.com/apexcharts/apexcharts.js/commit/68f3f34d125719b4767614fe0a595cc65bde1d19
https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1070616
https://snyk.io/vuln/SNYK-JS-APEXCHARTS-1062708
https://www.npmjs.com/package/apexcharts
https://github.com/advisories/GHSA-w46j-8hm6-h8mm