CVE-2026-62345

Wanderer is a self-hosted trail database for saving and sharing adventures.

Wanderer is a self-hosted trail database for saving and sharing adventures. Prior to 0.19.3, an authenticated user can store a crafted waypoint.icon value that createMarkerFromWaypoint() passes into FontawesomeMarker, where insertAdjacentHTML inserts the unvalidated value into map marker markup. Opening the affected trail map executes attacker-controlled script in the viewer's browser, which can expose session tokens or perform actions as the victim. Federated waypoint data…

6. Nov 2026

Ausgewertete Quellen

• NVD
  CVE-2026-62345