Description
A DOM based cross-site scripting (XSS) vulnerability in the component generator.html of tabatkins/railroad-diagrams before commit ea9a123 allows attackers to execute arbitrary Javascript via sending a crafted URL.
Medium · 6.1
CVE-2024-26467
EUVD-2024-23736GHSA-7j4q-xf7j-jxcp
A DOM based cross-site scripting (XSS) vulnerability in the component generator.html of tabatkins/railroad-diagrams before commit ea9a123 a…
Published Feb 26, 2024 · Updated Oct 31, 2024 · Assigned by mitre