CVE-2026-22637

Опубликовано: 15 янв. 2026

Источник: nvd

Описание

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Связанные уязвимости

GHSA-77c8-xpc7-q24c

CVSS3: 6.8

github

24 дня назад

The built-in XY Chart plugin is vulnerable to a DOM XSS vulnerability. A user with Editor permissions is able to modify such a panel in order to make it execute arbitrary JavaScript.