nvd-json-data-feeds/CVE-2024/CVE-2024-264xx/CVE-2024-26467.json

{
  "id": "CVE-2024-26467",
  "sourceIdentifier": "cve@mitre.org",
  "published": "2024-02-26T16:27:59.823",
  "lastModified": "2024-02-26T16:32:25.577",
  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A DOM based cross-site scripting (XSS) vulnerability in the component generator.html of tabatkins/railroad-diagrams before commit ea9a123 allows attackers to execute arbitrary Javascript via sending a crafted URL."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad de cross-site scripting (XSS) basada en DOM en el componente generate.html de tabatkins/railroad-diagrams antes de el commit ea9a123 permite a los atacantes ejecutar Javascript arbitrario mediante el env\u00edo de una URL manipulada."
    }
  ],
  "metrics": {},
  "references": [
    {
      "url": "https://gist.github.com/cd80/50463b0e62067ec861b7006cbf46b068",
      "source": "cve@mitre.org"
    }
  ]
}