Description

Plotly, Inc. plotly.js versions prior to 1.16.0 are vulnerable to an XSS issue.

Remediation

References

http://help.plot.ly/security-advisories/2016-08-08-plotlyjs-xss-advisory/

Related Vulnerabilities

CVE-2022-36908 Vulnerability in maven package org.jenkins-ci.plugins:openshift-deployer

CVE-2022-42123 Vulnerability in maven package com.liferay:com.liferay.portal.search.elasticsearch7.impl

CVE-2020-1926 Vulnerability in maven package org.apache.hive:hive-service

CVE-2019-10242 Vulnerability in maven package org.eclipse.kura:org.eclipse.kura.web2

CVE-2012-2379 Vulnerability in maven package org.apache.cxf:cxf-bundle

Severity

High

Classification

CWE-79 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Vendor Advisory