unknown

CVE-2026-120988

billboard.js before 4.1.3 is vulnerable to cross‑site scripting due to improper sanitization of series ids during legend template rendering.

Overview

billboard.js before 4.1.3 is vulnerable to cross‑site scripting due to improper sanitization of series ids during legend template rendering. An attacker can inject malicious JavaScript when the chart is rendered, potentially compromising the web application. The flaw affects any site that uses billboard.js for data visualization.

Description

billboard.js before 4.1.3 allows an attacker to execute malicious JavaScript due to improper sanitization of series ids during legend template rendering.

Impact

Confidentiality: arbitrary JavaScript execution can lead to data theft or session hijacking. Integrity: attacker can alter chart output or inject malicious code. Availability: not directly impacted. Defenders: web developers and site administrators using billboard.js.

Remediation

Upgrade to billboard.js 4.1.3 or later. If an upgrade is not immediately possible, sanitize or escape series ids before rendering and avoid custom legend templates that use unsanitized input. Consider disabling client‑side rendering of untrusted data.

Risk context

Severity is currently unknown and no EPSS score is available, but the vulnerability allows arbitrary JavaScript execution, which is a high‑impact XSS. Defenders should treat it as a moderate to high risk until a patch is applied.

Affected products

  • billboard.js

Scores

Severity
unknown
CVSS v2
—
CVSS v3
—
CVSS v4
—
EPSS
—

XSS JavaScript Web Chart billboard.js InputSanitization

← All CVEs

Related CVEs

unknown

CVE-2026-119341

Tesseract OCR engine before 5.5.4 can suffer memory corruption when processing a pre‑adapted template file, leading to a denial‑of‑service. The flaw occurs in ReadAdaptedClass when legacy mode is enabled and attacker‑controlled .a files are parsed. It affects all Tesseract 5.x releases that allow pre‑adapted templates.

View analysis

unknown

CVE-2026-99188

A vulnerability in the Linux kernel's stmmac network driver causes an interrupt storm during system resume from sleep states. This occurs because the RGMII status interrupt is not cleared, leading to CPU starvation and potential system hangs or watchdog resets on affected hardware.

View analysis

unknown

CVE-2026-99206

A race condition in the Linux kernel's iSCSI target discovery module allows concurrent configfs operations to trigger a double-free vulnerability. This flaw occurs when multiple processes simultaneously update the discovery AuthMethod parameter without proper synchronization. It poses a stability and security risk to systems exposing iSCSI targets via the kernel's target subsystem.

View analysis

unknown

CVE-2026-99148

A reference counting flaw in the Linux kernel's amdgpu driver allows a Buffer Object (BO) to be evicted while user-space GPU queues still hold active mappings. This occurs because the eviction fence is detached when any handle to the BO is closed, rather than only when the last reference to the underlying virtual address space is released. The issue can lead to use-after-free conditions or GPU hangs on systems using AMD graphics hardware.

View analysis