Reflected XSS Vulnerability in Chartify

CVE-2024-47347

What is CVE-2024-47347?

An improper neutralization of input during web page generation has been identified in Chartify, a product by Chart Builder Team. This vulnerability allows for reflected cross-site scripting (XSS), which can lead to unauthorized script execution in users' browsers. Attackers may exploit this flaw by crafting malicious links that, when accessed, inject harmful scripts into web pages viewed by unsuspecting users. The issue is present in versions of Chartify from n/a to 2.7.6, posing a risk to the integrity of user sessions and potentially compromising sensitive information.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References