Skip to content
OpenAdvisories

Vendor

excalidraw

1 known vulnerabilities.

Products

excalidraw 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2024-32472

    excalidraw vulnerable to a Stored XSS in excalidraw's web embed component

    excalidraw is an open source virtual hand-drawn style whiteboard. A stored XSS vulnerability in Excalidraw's web embeddable component. This allows arbitrary JavaScript to be run in the context of the domain where the editor is hosted. There were two vectors. …

    excalidraw excalidraw @excalidraw/excalidraw npm