https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T16:51:31.439253+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-60693 EUVD-2026-60693 2026-10-02T16:51:31.516665+00:00 EUVD-2026-60693 https://cve.radiocsirt.org/vuln/fkie_cve-2019-1020005 fkie_cve-2019-1020005 2026-10-02T16:51:31.516703+00:00

invenio-communities before 1.0.0a20 allows XSS.

 https://cve.radiocsirt.org/vuln/ghsa-mfv8-q39f-mgfg GHSA-mfv8-q39f-mgfg — Cross-site Scripting in invenio-communities 2026-10-02T16:51:31.516733+00:00

Affected: PyPI: invenio-communities

## Cross-Site Scripting (XSS) vulnerability in Jinja templates

### Impact A Cross-Site Scripting (XSS) vulnerability was discovered in two Jinja templates in the Invenio-Communities module. The vulnerability allows a user to create a new community and include script element tags inside the description and page fields.

### Patches The problem has been patched in v1.0.0a20.

### For more information If you have any questions or comments about this advisory: * Email us at [info@inveniosoftware.org](mailto:info@inveniosoftware.org)

 https://cve.radiocsirt.org/vuln/gsd-2019-1020005 gsd-2019-1020005 2026-10-02T16:51:31.516763+00:00 gsd-2019-1020005 https://cve.radiocsirt.org/vuln/pysec-2019-25 PYSEC-2019-25 2026-10-02T16:51:31.516776+00:00

Affected: PyPI: invenio-communities

invenio-communities before 1.0.0a20 allows XSS.