Vendor

Highcharts

1 brief RSS

Highcharts Core: Breadcrumbs style attribute cross-site scripting (CVE-2026-118246)

A cross-site scripting (XSS) vulnerability in Highcharts Core allows arbitrary JavaScript execution when an attacker-controlled chart configuration injects event-handler attributes into SVG breadcrumb elements.

Highcharts Core +2 xss web-application client-side-injection

1t 1c 49m ago