https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T09:30:29.332180+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-04997 cnvd-2022-04997 2026-10-03T09:30:29.400650+00:00 cnvd-2022-04997 https://cve.radiocsirt.org/vuln/euvd-2026-29434 EUVD-2026-29434 2026-10-03T09:30:29.400694+00:00 EUVD-2026-29434 https://cve.radiocsirt.org/vuln/fkie_cve-2021-36738 fkie_cve-2021-36738 2026-10-03T09:30:29.400715+00:00

The input fields in the JSP version of the Apache Pluto Applicant MVCBean CDI portlet are vulnerable to Cross-Site Scripting (XSS) attacks. Users should migrate to version 3.1.1 of the applicant-mvcbean-cdi-jsp-portlet.war artifact

 https://cve.radiocsirt.org/vuln/ghsa-jg6j-jrxv-2hh9 GHSA-jg6j-jrxv-2hh9 — Cross-site Scripting in Apache Pluto 2026-10-03T09:30:29.400756+00:00

Affected: Maven: org.apache.portals.pluto:pluto-portal

The input fields in the JSP version of the Apache Pluto Applicant MVCBean CDI portlet are vulnerable to Cross-Site Scripting (XSS) attacks. Users should migrate to version 3.1.1 of the applicant-mvcbean-cdi-jsp-portlet.war artifact

 https://cve.radiocsirt.org/vuln/gsd-2021-36738 gsd-2021-36738 2026-10-03T09:30:29.400794+00:00 gsd-2021-36738