Vulnerabilities
VEX
CWE
ATT&CK
KEV Catalogs
All catalogs
CIRCL
CISA
ENISA
Shadowserver
Previdian
Community
Sightings
Comments
Bundles
Organizations
Contributors
Disclosure
Vulnerability Disclosures
Statistics
Log in
About
Search term
Success
GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference -
Registration
← All credits
Paul Gerste (Sonar)
1 vulnerability record and advisories credit this contributor.
CVE-2025-2703
The built-in XY Chart plugin is vulnerable to a DOM XSS vulnerability. A user with Editor permissions is able to modify such a panel in order to make it execute arbitrary JavaScript.