https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T23:35:53.531045+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-00084 cnvd-2017-00084 2026-10-02T23:35:53.534995+00:00 cnvd-2017-00084 https://cve.radiocsirt.org/vuln/euvd-2026-88235 EUVD-2026-88235 2026-10-02T23:35:53.535037+00:00 EUVD-2026-88235 https://cve.radiocsirt.org/vuln/fkie_cve-2016-9891 fkie_cve-2016-9891 2026-10-02T23:35:53.535060+00:00

Cross-site scripting (XSS) vulnerability in admin/media.php and admin/media_item.php in Dotclear before 2.11 allows remote authenticated users to inject arbitrary web script or HTML via the upfiletitle or media_title parameter (aka the media title).

 https://cve.radiocsirt.org/vuln/ghsa-f76j-25f8-frg7 GHSA-f76j-25f8-frg7 2026-10-02T23:35:53.535102+00:00

Cross-site scripting (XSS) vulnerability in admin/media.php and admin/media_item.php in Dotclear before 2.11 allows remote authenticated users to inject arbitrary web script or HTML via the upfiletitle or media_title parameter (aka the media title).

 https://cve.radiocsirt.org/vuln/gsd-2016-9891 gsd-2016-9891 2026-10-02T23:35:53.535130+00:00 gsd-2016-9891 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-9891 UBUNTU-CVE-2016-9891 2026-10-02T23:35:53.535148+00:00

Affected: Ubuntu:16.04:LTS: dotclear

Cross-site scripting (XSS) vulnerability in admin/media.php and admin/media_item.php in Dotclear before 2.11 allows remote authenticated users to inject arbitrary web script or HTML via the upfiletitle or media_title parameter (aka the media title).