Description
Cross Site Scripting vulnerability in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to execute arbitrary code via the mcp parameter
High · 8.1
CVE-2026-50758
EUVD-2026-47603GHSA-vcgq-93c9-35cm
Cross Site Scripting vulnerability in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to execute arbitrary code via the mcp par…
Published Jul 21, 2026 · Updated Jul 22, 2026 · Assigned by mitre