Cross-site Scripting
In Morris, when control over the labels is obtained, script can be injected. The script will run on the client side whenever that specific graph is loaded.
Advisories for Npm/Morris.js package
2018
In Morris, when control over the labels is obtained, script can be injected. The script will run on the client side whenever that specific graph is loaded.