1 matches found
CVE-2025-58172: Improper Neutralization of Input During Web Page Generation
drawnix is an all in one open-source whiteboard tool. In drawnix versions through 0.2.1, a cross-site scripting XSS vulnerability exists in the debug logging functionality. User controlled content is inserted directly into the DOM via innerHTML without sanitization when the global function...
5.3CVSS5.9AI score0.0046EPSS
SaveExploits0References1
20