Skip to content

Vendor

morris.js project vulnerabilities

1 published CVE affecting morris.js project, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0
Atom feed of morris.js project alerts

Products

Latest morris.js project CVEs

Newest publication first

  1. CVE-2017-16022 Cross-Site Scripting in morris.js

    Published
    MediumCVSS 6.1 EPSS 0.89%

    Morris.js creates an svg graph, with labels that appear when hovering over a point. The hovering label names are not escaped in versions 0.5.0 and earlier. If control over the labels is obtained, script can be injected. The script will run on the client side whenever that specifi...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.