CVEs-PoC/2021/CVE-2021-23327.md

CVE-2021-23327

Description

The package apexcharts before 3.24.0 are vulnerable to Cross-site Scripting (XSS) via lack of sanitization of graph legend fields.

POC

Reference

• 68f3f34d12
• https://github.com/apexcharts/apexcharts.js/pull/2158
• https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1070616
• https://snyk.io/vuln/SNYK-JS-APEXCHARTS-1062708

Github

No PoCs found on GitHub currently.