billboard.js before 4.1.3 allows an attacker to execute malicious JavaScript due to improper sanitization of series ids during legend template rendering.
The attacker must be able to supply or influence a series ID that is rendered through a legend template. Exploitation also requires a user to interact with the crafted content, as indicated by the UI:R vector.
billboard.js versions before 4.1.3 are affected. The provided information does not identify any configuration prerequisite beyond rendering a legend template with an improperly sanitized series ID.
Avoid rendering attacker-controlled or untrusted values as series IDs in legend templates. Validate or sanitize series IDs before they reach the legend rendering path.