CVE-2020-16254

The Chartkick gem through 3.3.2 for Ruby allows Cascading Style Sheets (CSS) Injection (without attribute)

published August 5, 2020

CVSS
—
EPSS
1%
Percentile
54.7
In the wild
Unconfirmed
What it is

The Chartkick gem through 3.3.2 for Ruby allows Cascading Style Sheets (CSS) Injection (without attribute).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00758 · 54.7th percentile
Published
2020-08-05T19:52Z
EPSS history
Timeline
  • 05 AUG 19:52Z
    The Chartkick gem through 3.3.2 for Ruby allows Cascading Style Sheets (CSS) Injection (without attribute)
    cvelistv5