https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-20T10:39:55.443922+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-128282 EUVD-2026-128282 2026-10-20T10:39:55.446799+00:00 EUVD-2026-128282 https://cve.radiocsirt.org/vuln/fkie_cve-2008-3219 fkie_cve-2008-3219 2026-10-20T10:39:55.446831+00:00

The Drupal filter_xss_admin function in 5.x before 5.8 and 6.x before 6.3 does not "prevent use of the object HTML tag in administrator input," which has unknown impact and attack vectors, probably related to an insufficient cross-site scripting (XSS) protection mechanism.

 https://cve.radiocsirt.org/vuln/ghsa-wx48-g6pf-jvc9 GHSA-wx48-g6pf-jvc9 2026-10-20T10:39:55.446863+00:00

The Drupal filter_xss_admin function in 5.x before 5.8 and 6.x before 6.3 does not "prevent use of the object HTML tag in administrator input," which has unknown impact and attack vectors, probably related to an insufficient cross-site scripting (XSS) protection mechanism.

 https://cve.radiocsirt.org/vuln/gsd-2008-3219 gsd-2008-3219 2026-10-20T10:39:55.446881+00:00 gsd-2008-3219