← All advisories

Unrated severityNVD Advisory· Published Jul 21, 2026· Updated Jul 22, 2026

CVE-2026-50758

CVE-2026-50758

Description

Cross Site Scripting vulnerability in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to execute arbitrary code via the mcp parameter

Affected products

1

Dayuanjiang/Next AI Draw.iollm-fuzzy
Range: <=0.4.13

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.