Summary: The Chartkick gem through 3.3.2 for Ruby allows Cascading Style Sheets (CSS) Injection (without attribute).Published: Wednesday, August 5, 2020 - 20:15cvss: 5.0