CVE-2020-16254

Publication date

2020-08-05 19:52:30

Family

mitre

State

PUBLISHED

Description

The Chartkick gem through 3.3.2 for Ruby allows Cascading Style Sheets (CSS) Injection (without attribute).