Billboard.Js

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest
CVE-2026-1513 MEDIUM PATCH This Month

Cross-site scripting (XSS) in Billboard.js versions before 3.18.0 enables remote attackers to inject and execute arbitrary JavaScript through inadequately sanitized chart configuration options, affecting any application using the vulnerable library. The attack requires user interaction but can compromise confidentiality and integrity of affected web applications. No patch is currently available.

XSS Billboard.Js Suse
NVD
CVSS 3.1
6.1
EPSS
0.0%
CVE-2025-49223 CRITICAL PATCH Act Now

Prototype pollution in billboard.js before 3.15.1 via generate function.

RCE Denial Of Service Billboard.Js
NVD
CVSS 3.1
9.8
EPSS
0.4%
CVE-2026-1513
EPSS 0% CVSS 6.1
MEDIUM PATCH This Month

Cross-site scripting (XSS) in Billboard.js versions before 3.18.0 enables remote attackers to inject and execute arbitrary JavaScript through inadequately sanitized chart configuration options, affecting any application using the vulnerable library. The attack requires user interaction but can compromise confidentiality and integrity of affected web applications. No patch is currently available.

XSS Billboard.Js Suse
NVD
CVE-2025-49223
EPSS 0% CVSS 9.8
CRITICAL PATCH Act Now

Prototype pollution in billboard.js before 3.15.1 via generate function.

RCE Denial Of Service Billboard.Js
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy