Security Advisory

CVE-2026-30691

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-05-20 00:00:00
Last updated 2026-05-20 17:50:41
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Cross-Site Scripting (XSS) vulnerability in @cyntler/react-doc-viewer v1.17.1 allows remote attackers to execute arbitrary JavaScript via a crafted .txt file. The TXTRenderer component fails to sanitize file content and explicitly casts raw data as a ReactNode