PT-2024-32562 · Chartify · Chartify

·

CVE-2024-47347

·

Published

2024-10-06

·

Updated

2024-10-07

CVSS v3.1

7.1

High

VectorAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions Chartify versions n/a through 2.7.6
Description The issue is related to Improper Neutralization of Input During Web Page Generation, which leads to Reflected XSS. This problem allows for Cross-site Scripting, where an attacker can inject malicious scripts into a website.
Recommendations For versions n/a through 2.7.6, update to a version later than 2.7.6 to resolve the issue. As a temporary workaround, consider restricting user input to prevent malicious scripts from being injected into the web page.

Fix

XSS

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2024-47347

Affected Products

Chartify