← Database

CVE-2025-2703

MEDIUM CVSS: 6.8 Published: 2025-04-23 Modified: 2026-06-17

Description

The built-in XY Chart plugin is vulnerable to a DOM XSS vulnerability. A user with Editor permissions is able to modify such a panel in order to make it execute arbitrary JavaScript.

Affected Platforms

Unknown

Weakness Type

CWE-79

References