https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T16:53:20.190177+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2019-27119 cnvd-2019-27119 2026-10-02T16:53:20.193813+00:00 cnvd-2019-27119 https://cve.radiocsirt.org/vuln/euvd-2026-70599 EUVD-2026-70599 2026-10-02T16:53:20.193844+00:00 EUVD-2026-70599 https://cve.radiocsirt.org/vuln/fkie_cve-2018-20858 fkie_cve-2018-20858 2026-10-02T16:53:20.193858+00:00

Recommender before 2018-07-18 allows XSS.

 https://cve.radiocsirt.org/vuln/ghsa-3j5x-7ccf-ppgm GHSA-3j5x-7ccf-ppgm — Cross-site scripting in recommender-xblock 2026-10-02T16:53:20.193883+00:00

Affected: PyPI: recommender-xblock

Recommender before 1.3.1 allows XSS. It is possible for a learner to craft a fake resource to recommender, that includes script which could possibly steal credentials from staff if they are lured into viewing the recommended resource.

 https://cve.radiocsirt.org/vuln/gsd-2018-20858 gsd-2018-20858 2026-10-02T16:53:20.193905+00:00 gsd-2018-20858 https://cve.radiocsirt.org/vuln/pysec-2019-219 PYSEC-2019-219 2026-10-02T16:53:20.193916+00:00

Affected: PyPI: recommender-xblock

Recommender before 2018-07-18 allows XSS.