CVE-2020-16254

Summary: 
The Chartkick gem through 3.3.2 for Ruby allows Cascading Style Sheets (CSS) Injection (without attribute).
Published: 
Wednesday, August 5, 2020 - 20:15
cvss: 
5.0