7.1
/ 10
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N
Description
billboard.js before 3.18.0 allows an attacker to execute malicious JavaScript due to improper sanitization during chart option binding.
Basic Information
ID
CVE-2026-1513
Source
naver
Published
Jan 28, 2026 at 01:28
Modified
Jan 28, 2026 at 14:47
Affected Product
Vendor
NAVER
Product
billboard.js
Version
3.18.0