Product
Progress Kendo UI for jQuery Chart component is vulnerable to an XSS flaw where default tooltips render point values as raw HTML, allowing arbitrary JavaScript execution upon user interaction.