https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T09:51:54.200794+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-102352 EUVD-2026-102352 2026-10-06T09:51:54.203842+00:00 EUVD-2026-102352 https://cve.radiocsirt.org/vuln/fkie_cve-2014-7264 fkie_cve-2014-7264 2026-10-06T09:51:54.203875+00:00

Multiple cross-site scripting (XSS) vulnerabilities in admin/themes/default/pages/manage_users.twig in the Users Management feature in the admin component in Chyrp before 2.5.1 allow remote authenticated users to inject arbitrary web script or HTML via the (1) user.email or (2) user.website field in a user registration.

 https://cve.radiocsirt.org/vuln/ghsa-4wpp-v97f-6975 GHSA-4wpp-v97f-6975 2026-10-06T09:51:54.203906+00:00

Multiple cross-site scripting (XSS) vulnerabilities in admin/themes/default/pages/manage_users.twig in the Users Management feature in the admin component in Chyrp before 2.5.1 allow remote authenticated users to inject arbitrary web script or HTML via the (1) user.email or (2) user.website field in a user registration.

 https://cve.radiocsirt.org/vuln/gsd-2014-7264 gsd-2014-7264 2026-10-06T09:51:54.203923+00:00 gsd-2014-7264 https://cve.radiocsirt.org/vuln/jvndb-2014-000149 jvndb-2014-000149 2026-10-06T09:51:54.203935+00:00

Chyrp is a blogging engine. Chyrp contains a cross-site scripting vulnerability. Yuji Tounai of NTT Com Security (Japan) KK reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.