https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T07:44:57.164189+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-11306 EUVD-2026-11306 2026-10-03T07:44:57.225937+00:00 EUVD-2026-11306 https://cve.radiocsirt.org/vuln/fkie_cve-2022-0877 fkie_cve-2022-0877 2026-10-03T07:44:57.225976+00:00

Cross-site Scripting (XSS) - Stored in GitHub repository bookstackapp/bookstack prior to v22.02.3.

 https://cve.radiocsirt.org/vuln/ghsa-5rcc-6cmj-7728 GHSA-5rcc-6cmj-7728 — Cross-site Scripting in BookStack 2026-10-03T07:44:57.226010+00:00

Affected: Packagist: ssddanbrown/bookstack

Iframe tags don't have a sandbox attribute, this makes an attacker able to execute malicious javascript via an iframe and perform phishing attacks. The sandbox attribute will block script execution and prevents the content to navigate its top-level browsing context which will stop this type of attack.

 https://cve.radiocsirt.org/vuln/gsd-2022-0877 gsd-2022-0877 2026-10-03T07:44:57.226036+00:00 gsd-2022-0877