https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T02:33:15.457489+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-68067 EUVD-2026-68067 2026-10-03T02:33:15.460435+00:00 EUVD-2026-68067 https://cve.radiocsirt.org/vuln/fkie_cve-2018-16358 fkie_cve-2018-16358 2026-10-03T02:33:15.460465+00:00

A cross-site scripting (XSS) vulnerability in inc/core/class.dc.core.php in the media manager in Dotclear through 2.14.1 allows remote authenticated users to upload HTML content containing an XSS payload with the file extension .ahtml.

 https://cve.radiocsirt.org/vuln/ghsa-qjv7-4mwp-qmw5 GHSA-qjv7-4mwp-qmw5 2026-10-03T02:33:15.460495+00:00

A cross-site scripting (XSS) vulnerability in inc/core/class.dc.core.php in the media manager in Dotclear through 2.14.1 allows remote authenticated users to upload HTML content containing an XSS payload with the file extension .ahtml.

 https://cve.radiocsirt.org/vuln/gsd-2018-16358 gsd-2018-16358 2026-10-03T02:33:15.460511+00:00 gsd-2018-16358 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-16358 UBUNTU-CVE-2018-16358 2026-10-03T02:33:15.460522+00:00

Affected: Ubuntu:16.04:LTS: dotclear

A cross-site scripting (XSS) vulnerability in inc/core/class.dc.core.php in the media manager in Dotclear through 2.14.1 allows remote authenticated users to upload HTML content containing an XSS payload with the file extension .ahtml.