https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-24T05:05:40.572899+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-130603 EUVD-2026-130603 2026-10-24T05:05:40.593470+00:00 EUVD-2026-130603 https://cve.radiocsirt.org/vuln/fkie_cve-2008-5720 fkie_cve-2008-5720 2026-10-24T05:05:40.593508+00:00

Cross-site scripting (XSS) vulnerability in Mayaa before 1.1.23 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving the default error page for the org.seasar.mayaa.impl.engine.PageNotFoundException exception and possibly other exceptions.

 https://cve.radiocsirt.org/vuln/ghsa-m3p9-c7p3-xxmp GHSA-m3p9-c7p3-xxmp — Mayaa Cross-site Scripting vulnerability 2026-10-24T05:05:40.593540+00:00

Affected: Maven: com.github.seasarorg.mayaa:mayaa

Cross-site scripting (XSS) vulnerability in Mayaa before 1.1.23 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving the default error page for the `org.seasar.mayaa.impl.engine.PageNotFoundException` exception and possibly other exceptions.

 https://cve.radiocsirt.org/vuln/gsd-2008-5720 gsd-2008-5720 2026-10-24T05:05:40.593565+00:00 gsd-2008-5720 https://cve.radiocsirt.org/vuln/jvndb-2008-000085 jvndb-2008-000085 2026-10-24T05:05:40.593578+00:00

Mayaa from Seasar Project contains a cross-site scripting vulnerability. Mayaa from Seasar Project is an open source Java template engine. The default error page that Mayaa displays contains a cross-site scripting vulnerability. Tetsuo Nakamura of NEC Soft,Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.