mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-30 04:59:31 +02:00
1.1 KiB
1.1 KiB
CVE-2025-2703
Description
The built-in XY Chart plugin is vulnerable to a DOM XSS vulnerability. A user with Editor permissions is able to modify such a panel in order to make it execute arbitrary JavaScript.
POC
Reference
No PoCs from references.