Lucene search
+L

9 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 9:31 a.m.•17 views

CVE-2024-26467

A DOM based cross-site scripting XSS vulnerability in the component generator.html of tabatkins/railroad-diagrams before commit ea9a123 allows attackers to execute arbitrary Javascript via sending a crafted URL...

6.1CVSS6AI score0.00429EPSS
SaveExploits0References1
NVD
NVD
•added 2024/02/26 4:27 p.m.•23 views

CVE-2024-26467

A DOM based cross-site scripting XSS vulnerability in the component generator.html of tabatkins/railroad-diagrams before commit ea9a123 allows attackers to execute arbitrary Javascript via sending a crafted URL...

6.1CVSS5.8AI score0.00429EPSS
SaveExploits0References1
OSV
OSV
•added 2024/02/26 4:27 p.m.•20 views

CVE-2024-26467

A DOM based cross-site scripting XSS vulnerability in the component generator.html of tabatkins/railroad-diagrams before commit ea9a123 allows attackers to execute arbitrary Javascript via sending a crafted URL...

6.1CVSS5.9AI score0.00429EPSS
SaveExploits0References1
Prion
Prion
•added 2024/02/26 4:27 p.m.•28 views

Cross site scripting

A DOM based cross-site scripting XSS vulnerability in the component generator.html of tabatkins/railroad-diagrams before commit ea9a123 allows attackers to execute arbitrary Javascript via sending a crafted URL...

6.2AI score0.00429EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/02/26 12:00 a.m.•20 views

CVE-2024-26467

A DOM based cross-site scripting XSS vulnerability in the component generator.html of tabatkins/railroad-diagrams before commit ea9a123 allows attackers to execute arbitrary Javascript via sending a crafted URL...

6.2AI score0.00429EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/02/26 12:00 a.m.•30 views

CVE-2024-26467

A DOM based cross-site scripting XSS vulnerability in the component generator.html of tabatkins/railroad-diagrams before commit ea9a123 allows attackers to execute arbitrary Javascript via sending a crafted URL...

6AI score0.00429EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/26 12:00 a.m.•3 views

CVE-2024-26467: Improper Neutralization of Input During Web Page Generation

A DOM based cross-site scripting XSS vulnerability in the component generator.html of tabatkins/railroad-diagrams before commit ea9a123 allows attackers to execute arbitrary Javascript via sending a crafted URL...

6.1CVSS6AI score0.00429EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/02/26 12:00 a.m.•19 views

PT-2024-21387 · Tabatkins · Railroad-Diagrams

Name of the Vulnerable Software and Affected Versions: tabatkins/railroad-diagrams versions before commit ea9a123 Description: A DOM based cross-site scripting XSS vulnerability in the component generator.html of tabatkins/railroad-diagrams allows attackers to execute arbitrary Javascript via...

6.1CVSS5.9AI score0.00429EPSS
SaveExploits0References6
CVE
CVE
•added 2024/02/26 12:00 a.m.•5742 views

CVE-2024-26467

A DOM-based cross-site scripting (XSS) vulnerability exists in the tabatkins/railroad-diagrams library, specifically within the component generator.html file. The flaw allows an attacker to execute arbitrary JavaScript by providing a specially crafted URL . This issue affects versions prior to co...

6.1CVSS6AI score0.00429EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder