Checkmarx reports potential XSS issues

[BradG]

We use Checkmarx Static Code Analysis to identify code vulnerabilities.  In fusioncharts.js 3.12.2, Checkmarx reports 3 potential XSS issues when setting innerHTML to a text property:

line 310 (first occurrence): 

line 310 (second occurrence): 

line 316: 

Can you either fix these vulnerabilities or assure us that they cannot be used to enable a cross site scripting attack?

Edited April 6, 2018 by BradG

[Ayan Bhadury]

Hi,

We are looking into this, we would get back to you if there are any updates.

[pughmat]

Have there been any updates to this request?

Thanks,

Matt

 

[Akash Biswas]

Hi Matt,

 

We are looking into this, we would get back to you if there are any updates.

 

Thanks,

Akash.

[Israel]

Hi, I am also seeing this error in a security scan. Has there been a fix?

[Akash Biswas]

Hi,

 

We are looking into this, we would get back to you if there are any updates.

 

Thanks,

Akash.

[Ayan Bhadury]

HI,

Hope you are keeping well! Thank you for your continued patience.

 

For the issue reported, could you please upgrade your current version to the latest, i.e, FusionCharts Suite XT v3.15.1?