https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T17:11:35.064227+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-185502 EUVD-2026-185502 2026-10-18T17:11:35.115114+00:00 EUVD-2026-185502 https://cve.radiocsirt.org/vuln/fkie_cve-2013-4274 fkie_cve-2013-4274 2026-10-18T17:11:35.115150+00:00

Cross-site scripting (XSS) vulnerability in the password_policy_admin_view function in password_policy.admin.inc in the Password Policy module 6.x-1.x before 6.x-1.6 and 7.x-1.x before 7.x-1.5 for Drupal allows remote authenticated users with the "Administer policies" permission to inject arbitrary web script or HTML via the "Password Expiration Warning" field to the admin/config/people/password_policy/add page.

 https://cve.radiocsirt.org/vuln/ghsa-phfm-5754-88wq GHSA-phfm-5754-88wq 2026-10-18T17:11:35.115183+00:00

Cross-site scripting (XSS) vulnerability in the password_policy_admin_view function in password_policy.admin.inc in the Password Policy module 6.x-1.x before 6.x-1.6 and 7.x-1.x before 7.x-1.5 for Drupal allows remote authenticated users with the "Administer policies" permission to inject arbitrary web script or HTML via the "Password Expiration Warning" field to the admin/config/people/password_policy/add page.

 https://cve.radiocsirt.org/vuln/gsd-2013-4274 gsd-2013-4274 2026-10-18T17:11:35.115202+00:00 gsd-2013-4274