Skip to content
OpenAdvisories

Product · plait-board

drawnix

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.3

    drawnix debug logging cross-site scripting vulnerability

    drawnix is an all in one open-source whiteboard tool. In drawnix versions through 0.2.1, a cross-site scripting (XSS) vulnerability exists in the debug logging functionality. User controlled content is inserted directly into the DOM via innerHTML without sani…