https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-21T22:44:24.764109+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-18607 cnvd-2018-18607 2026-10-21T22:44:24.767860+00:00 cnvd-2018-18607 https://cve.radiocsirt.org/vuln/euvd-2026-60865 EUVD-2026-60865 2026-10-21T22:44:24.767908+00:00 EUVD-2026-60865 https://cve.radiocsirt.org/vuln/fkie_cve-2018-0653 fkie_cve-2018-0653 2026-10-21T22:44:24.767929+00:00

Cross-site scripting vulnerability in GROWI v.3.1.11 and earlier allows remote attackers to inject arbitrary web script or HTML via Wiki page view.

 https://cve.radiocsirt.org/vuln/ghsa-36rg-h9r2-xv27 GHSA-36rg-h9r2-xv27 2026-10-21T22:44:24.767985+00:00

Cross-site scripting vulnerability in GROWI v.3.1.11 and earlier allows remote attackers to inject arbitrary web script or HTML via Wiki page view.

 https://cve.radiocsirt.org/vuln/gsd-2018-0653 gsd-2018-0653 2026-10-21T22:44:24.768010+00:00 gsd-2018-0653 https://cve.radiocsirt.org/vuln/jvndb-2018-000085 jvndb-2018-000085 2026-10-21T22:44:24.768027+00:00

GROWI provided by WESEEK, Inc. contains multiple cross-site scripting vulnerabilities listed below. * Stored cross-site scripting vulnerability in the UserGroup Management section of admin page (CWE-79) - CVE-2018-0652 * Stored cross-site scripting vulnerability in Wiki page view (CWE-79) - CVE-2018-0653 * Reflected cross-site scripting vulnerability in the modal for creating Wiki page (CWE-79) - CVE-2018-0654 * Stored cross-site scripting in the app settings section of admin page (CWE-79) - CVE-2018-0655 The following researchers reported the vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2018-0652, CVE-2018-0653 Yoshinori Hayashi of Information Science College CVE-2018-0654, CVE-2018-0655 Kanta Nishitani of Information Science College