Skip to content
Threat Feed
Subscribe

Product

Highcharts Core (>= 13.0.0, <= 13.0.2)

1 brief RSS
high advisory

Highcharts Core: Breadcrumbs style attribute cross-site scripting (CVE-2026-118246)

A cross-site scripting (XSS) vulnerability in Highcharts Core allows arbitrary JavaScript execution when an attacker-controlled chart configuration injects event-handler attributes into SVG breadcrumb elements.

Highcharts Core +2 xss web-application client-side-injection
1t 1c