What’s Vulnerable › Vulnerabilities

CVE-2017-1000006

• Severity: medium (CVSS 6.1 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-07-17 · updated 2026-06-17
• Weakness: CWE-79

Description

Plotly, Inc. plotly.js versions prior to 1.16.0 are vulnerable to an XSS issue.

Affected products

• Plotly.Js: 1.11.0, 1.12.0, 1.13.0, 1.14.0, 1.14.1, 1.14.2 (+1)

References

• http://help.plot.ly/security-advisories/2016-08-08-plotlyjs-xss-advisory/
• http://help.plot.ly/security-advisories/2016-08-08-plotlyjs-xss-advisory/

Get alerted when CVE-2017-1000006 or the next vulnerability affects your stack