Medium severity6.1NVD Advisory· Published Feb 26, 2024· Updated Jun 17, 2026
CVE-2024-26467
CVE-2024-26467
Description
A DOM based cross-site scripting (XSS) vulnerability in the component generator.html of tabatkins/railroad-diagrams before commit ea9a123 allows attackers to execute arbitrary Javascript via sending a crafted URL.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:tabatkins:railroad-diagram_generator:*:*:*:*:*:*:*:*Range: <2024-01-15
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <ea9a123
Patches
Vulnerability mechanics
References
1- gist.github.com/cd80/50463b0e62067ec861b7006cbf46b068nvdThird Party Advisory
News mentions
0No linked articles in our index yet.