https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T20:46:57.487417+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-12752 cnvd-2018-12752 2026-10-02T20:46:57.490710+00:00 cnvd-2018-12752 https://cve.radiocsirt.org/vuln/euvd-2026-61334 EUVD-2026-61334 2026-10-02T20:46:57.490744+00:00 EUVD-2026-61334 https://cve.radiocsirt.org/vuln/fkie_cve-2018-3763 fkie_cve-2018-3763 2026-10-02T20:46:57.490758+00:00

In Nextcloud Calendar before 1.5.8 and 1.6.1, a missing sanitization of search results for an autocomplete field could lead to a stored XSS requiring user-interaction. The missing sanitization only affected group names, hence malicious search results could only be crafted by privileged users like admins or group admins.

 https://cve.radiocsirt.org/vuln/ghsa-5pqm-hfmj-g8jg GHSA-5pqm-hfmj-g8jg 2026-10-02T20:46:57.490788+00:00

In Nextcloud Calendar before 1.5.8 and 1.6.1, a missing sanitization of search results for an autocomplete field could lead to a stored XSS requiring user-interaction. The missing sanitization only affected group names, hence malicious search results could only be crafted by privileged users like admins or group admins.

 https://cve.radiocsirt.org/vuln/gsd-2018-3763 gsd-2018-3763 2026-10-02T20:46:57.490805+00:00 gsd-2018-3763