https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-13T03:32:30.509173+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-29377 EUVD-2026-29377 2026-10-13T03:32:30.513153+00:00 EUVD-2026-29377 https://cve.radiocsirt.org/vuln/fkie_cve-2021-36454 fkie_cve-2021-36454 2026-10-13T03:32:30.513192+00:00

Cross Site Scripting (XSS) vulnerability in Naviwebs Navigate Cms 2.9 via the navigate-quickse parameter to 1) backups\backups.php, 2) blocks\blocks.php, 3) brands\brands.php, 4) comments\comments.php, 5) coupons\coupons.php, 6) feeds\feeds.php, 7) functions\functions.php, 8) items\items.php, 9) menus\menus.php, 10) orders\orders.php, 11) payment_methods\payment_methods.php, 12) products\products.php, 13) profiles\profiles.php, 14) shipping_methods\shipping_methods.php, 15) templates\templates.php, 16) users\users.php, 17) webdictionary\webdictionary.php, 18) websites\websites.php, and 19) webusers\webusers.php because the initial_url function is built in these files.

 https://cve.radiocsirt.org/vuln/ghsa-gh7r-jpw7-q393 GHSA-gh7r-jpw7-q393 2026-10-13T03:32:30.513244+00:00

Cross Site Scripting (XSS) vulnerability in Naviwebs Navigate Cms 2.9 via the navigate-quickse parameter to 1) backups\backups.php, 2) blocks\blocks.php, 3) brands\brands.php, 4) comments\comments.php, 5) coupons\coupons.php, 6) feeds\feeds.php, 7) functions\functions.php, 8) items\items.php, 9) menus\menus.php, 10) orders\orders.php, 11) payment_methods\payment_methods.php, 12) products\products.php, 13) profiles\profiles.php, 14) shipping_methods\shipping_methods.php, 15) templates\templates.php, 16) users\users.php, 17) webdictionary\webdictionary.php, 18) websites\websites.php, and 19) webusers\webusers.php because the initial_url function is built in these files.

 https://cve.radiocsirt.org/vuln/gsd-2021-36454 gsd-2021-36454 2026-10-13T03:32:30.513291+00:00 gsd-2021-36454 https://cve.radiocsirt.org/vuln/jvndb-2021-002282 jvndb-2021-002282 2026-10-13T03:32:30.513309+00:00

Navigate CMS is an open source Contents Management System (CMS) provided by Naviwebs S.C. Navigate CMS contains multiple vulnerabilities listed below. * Reflected cross-site scripting in the Help feature (CWE-79) * Reflected cross-site scripting (CWE-79) - CVE-2021-36454 * SQL injection (CWE-89) - CVE-2021-36455 Duong Xuan Hiep (Hydrasky) of VNCERT/CC reported these vulnerabilities to the developer and coordinated on his own. After coordination was completed, this case was reported to JPCERT/CC in order to notify users of the solutions via JVN.