Vulnerability CVE-2023-3026
Published: 2023-06-01

Description:
Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio prior to 21.2.8.

Type:

CWE-79

 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))

 References:
https://github.com/jgraph/drawio/commit/c7ac634055c3edfabc7729fc4298a5ab7bfbf384
https://huntr.dev/bounties/9bbcc127-1e69-4c88-b318-d2afef48eff0
Copyright 2026, cxsecurity.com

 

Back to Top