CVE-2024-26467

A DOM based cross-site scripting XSS vulnerability in the component generator.html of tabatkins/railroad-diagrams before commit ea9a123 allows attackers to execute arbitrary Javascript via sending a crafted URL...

CVE-2024-26467

A DOM-based cross-site scripting (XSS) vulnerability exists in the tabatkins/railroad-diagrams library, specifically within the component generator.html file. The flaw allows an attacker to execute arbitrary JavaScript by providing a specially crafted URL . This issue affects versions prior to co...