CVE-2026-50758

CVE-2026-50758CVE-2026-50758

Description

Cross Site Scripting vulnerability in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to execute arbitrary code via the mcp parameter

Scoring

Last modified2026-07-21
Sourced from NVD. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.