XSS in apexcharts

MOYENNE 6.3CVE-2021-23327 · GHSA-w46j-8hm6-h8mm · Published 09/02/2021 · updated 17/06/2026

En bref

CVE-2021-23327 est une vulnérabilité MOYENNE (CVSS 6.3) touchant apexcharts (fusioncharts), apexcharts.
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 1.4%, plus élevée que 72.4% des vulnérabilités.
Correctif : mettre à jour vers 3.24.0 ou plus récent.

Package	Affected versions	Patched versions
apexcharts fusioncharts	`< 3.24.0`	`3.24.0`
apexcharts npm	`< 3.24.0`	`3.24.0`

The package apexcharts before 3.24.0 are vulnerable to Cross-site Scripting (XSS) via lack of sanitization of graph legend fields.

NVD description

The package apexcharts before 3.24.0 are vulnerable to Cross-site Scripting (XSS) via lack of sanitization of graph legend fields.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.