Vulnerability record/PUBLISHED/Published Nov 3, 2026 07:15:35 UTC
CVE-2026-120988
billboard.js before 4.1.3 allows an attacker to execute malicious JavaScript due to improper sanitization of series ids during legend template rendering.
Base scoreN/A/ 10
SeverityNoneCVSS unscored
Exploitability / impact
CVSS metric breakdown
Base severityNone
No CVSS vector is available for this record.
CVSS communicates standardized severity and impact characteristics. It does not establish whether a system is exploitable in your specific environment.
Record context
CVE Numbering Authoritynaver
Last updatedNov 3, 2026 07:15:35 UTC
PublishedNov 3, 2026 07:15:35 UTC
ReservedNov 3, 2026 06:34:52 UTC
Credits
- Zachariah Mithani (AploSec)