CVE-2026-97224

A vulnerability was detected in Excalidraw up to 0.18.1. The impacted element is an unknown function of the file packages/excalidraw/data/restore.ts of the component Imported File Handler. Performing a manipulation of the argument customData.generationData.html results in cross site scripting. Th...

EUVD-2026-85919

A vulnerability was detected in Excalidraw up to 0.18.1. The impacted element is an unknown function of the file packages/excalidraw/data/restore.ts of the component Imported File Handler. Performing a manipulation of the argument customData.generationData.html results in cross site scripting. Th...

CVE-2026-97224

A cross-site scripting (XSS) vulnerability exists in Excalidraw versions up to 0.18.1 . The flaw is located within an unknown function in the packages/excalidraw/data/restore.ts file, specifically affecting the Imported File Handler component. An attacker can achieve remote execution of XSS by ma...

CVE-2026-97224 Excalidraw Imported File restore.ts cross site scripting

A vulnerability was detected in Excalidraw up to 0.18.1. The impacted element is an unknown function of the file packages/excalidraw/data/restore.ts of the component Imported File Handler. Performing a manipulation of the argument customData.generationData.html results in cross site scripting. Th...

PT-2026-97850

Name of the Vulnerable Software and Affected Versions Excalidraw versions prior to 0.18.2 Description An issue exists in the Imported File Handler component within the packages/excalidraw/data/restore.ts file. A remote attacker can perform cross-site scripting XSS—a technique used to inject...

CVE-2026-97224: Improper Neutralization of Input During Web Page Generation

A vulnerability was detected in Excalidraw up to 0.18.1. The impacted element is an unknown function of the file packages/excalidraw/data/restore.ts of the component Imported File Handler. Performing a manipulation of the argument customData.generationData.html results in cross site scripting. Th...