CVE-2026-118251 | Highcharts up to 11.4.8/12.6.0/13.0.x Credits cross site scripting

October 28, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in Highcharts up to 11.4.8/12.6.0/13.0.x. The impacted element is an unknown function of the component Credits. This manipulation causes cross site scripting.

The identification of this vulnerability is CVE-2026-118251. It is possible to initiate the attack remotely. There is no exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More