← Database

CVE-2022-25929

MEDIUM CVSS: 5.4 Published: 2022-12-21 Modified: 2026-06-17

Description

The package smoothie from 1.31.0 and before 1.36.1 are vulnerable to Cross-site Scripting (XSS) due to improper user input sanitization in strokeStyle and tooltipLabel properties. Exploiting this vulnerability is possible when the user can control these properties.

Affected Platforms

Smoothiecharts Smoothie Charts

Weakness Type

CWE-79, CWE-79

References