Skip to content
5.9 Medium

CVE-2025-30904 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro Chartify…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro Chartify chart-builder allows Stored XSS.This issue affects Chartify: from n/a through <= 3.1.7.

Affected products and versions

Product Affected versions Fixed in
Chartify 3.1 earliest → 3.1.7 No fix stated
The 4 CVEs of Chartify →
Track this CVE