CVE-2026-62346 | open-wanderer Wanderer up to 0.19.2 Elevation Profile elevationprofile.ts waypoint.name/waypoint.icon cross site scripting

A vulnerability was found in open-wanderer Wanderer up to 0.19.2. It has been rated as problematic. The affected element is an unknown function of the file web/src/lib/vendor/maplibre-elevation-profile/elevationprofile.ts of the component Elevation Profile. Performing a manipulation of the argument waypoint.name/waypoint.icon results in cross site scripting.

This vulnerability is known as CVE-2026-62346. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More