The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total55,822
Mitigations18,585
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
@highcharts/grid-pro>= 2.0.0, <= 3.1.0
npm: Highcharts Grid: `javascript:` URL in credits.href runs script on click
8.4
17 minutes ago
@highcharts/dashboards>= 3.2.0, <= 3.6.0
npm: Highcharts Grid: `javascript:` URL in credits.href runs script on click
8.4
17 minutes ago
@highcharts/grid-pro>= 2.0.0, <= 3.1.0
npm: Highcharts Grid parses pagination language options as HTML
8.6
17 minutes ago
@highcharts/grid-lite>= 2.0.0, <= 3.1.0
npm: Highcharts Grid parses pagination language options as HTML
8.6
17 minutes ago
@highcharts/dashboards>= 1.0.0, < 4.2.3
npm: Highcharts Dashboards parses fullscreen labels as HTML
8.4
18 minutes ago
@highcharts/dashboards>= 1.0.0, <= 4.2.2
npm: Highcharts Dashboards parses sidebar component labels as HTML
8.4
18 minutes ago
highcharts< 11.4.9
npm: Highcharts: `javascript:` URL in credits.href runs script on click
8.4
19 minutes ago
highcharts>= 6.1.0, < 11.4.9
npm: Highcharts: dotted series.keys paths write to Object.prototype
7.2
19 minutes ago
highcharts>= 13.0.0, <= 13.0.2
npm: Highcharts: series column construction writes to Object.prototype
7.1
19 minutes ago
highcharts>= 10.0.0, < 11.4.9
npm: Highcharts Core: `breadcrumbs.style` keys become SVG event-handler attributes
8.4
19 minutes ago
@highcharts/dashboards3.6.0
npm: Highcharts Grid Pro: cell-renderer `attributes` map written with raw `setAttribute`
8.5
19 minutes ago
@highcharts/grid-pro>= 2.0.0, <= 3.1.0
npm: Highcharts Grid Pro: cell-renderer `attributes` map written with raw `setAttribute`
8.5
19 minutes ago
@highcharts/grid-pro>= 2.3.0, <= 3.1.0
npm: Highcharts Grid: custom icon definition objects written with raw `setAttribute` on `<path>`
8.5
19 minutes ago
@highcharts/grid-lite>= 2.3.0, <= 3.1.0
npm: Highcharts Grid: custom icon definition objects written with raw `setAttribute` on `<path>`
8.5
19 minutes ago
@highcharts/dashboards>= 1.0.0, <= 4.2.1
npm: Highcharts Dashboards: `chartConstructor` is an unchecked lookup into the Highcharts namespace
8.6
19 minutes ago
@highcharts/grid-pro>= 2.0.0, <= 3.1.0
npm: Highcharts Dashboards / Grid Pro: `DataTable.setCell` and column writers treat `__proto__` as an existing column.
6.9
19 minutes ago
@highcharts/dashboards>= 1.0.0, <= 4.2.1
npm: Highcharts Dashboards / Grid Pro: `DataTable.setCell` and column writers treat `__proto__` as an existing column.
6.9
19 minutes ago
@highcharts/dashboards>= 1.0.0, <= 4.2.1
npm: Highcharts Dashboards: `__proto__` data table id writes sync listeners to `Object.prototype`
5.3
20 minutes ago
highcharts>= 12.0.0, < 12.6.1
npm: Highcharts Core: HTML text parsing falls back to unfiltered `innerHTML` during printing
7.2
20 minutes ago
highcharts>= 10.3.2, < 11.4.9
npm: Highcharts Core: `javascript:` URL in an `xlink:href` attribute survives text filtering and reaches exported charts
7.2
20 minutes ago