CVE-2026-62345 | open-wanderer Wanderer up to 0.19.2 Map Marker createMarkerFromWaypoint waypoint.icon cross site scripting

November 6, 2026 Yanac

A vulnerability identified as problematic has been detected in open-wanderer Wanderer up to 0.19.2. This affects the function createMarkerFromWaypoint of the component Map Marker. The manipulation of the argument waypoint.icon leads to cross site scripting.

This vulnerability is uniquely identified as CVE-2026-62345. The attack is possible to be carried out remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More