https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T18:12:32.016902+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-47474 cnvd-2022-47474 2026-10-03T18:12:32.267102+00:00 cnvd-2022-47474 https://cve.radiocsirt.org/vuln/euvd-2026-11678 EUVD-2026-11678 2026-10-03T18:12:32.267173+00:00 EUVD-2026-11678 https://cve.radiocsirt.org/vuln/fkie_cve-2022-1445 fkie_cve-2022-1445 2026-10-03T18:12:32.267201+00:00

Stored Cross Site Scripting vulnerability in the checked_out_to parameter in GitHub repository snipe/snipe-it prior to 5.4.3. The vulnerability is capable of stolen the user Cookie.

 https://cve.radiocsirt.org/vuln/ghsa-hpx4-xjp7-m4vr GHSA-hpx4-xjp7-m4vr — Stored cross-site scripting in Snipe-IT 2026-10-03T18:12:32.267294+00:00

Affected: Packagist: snipe/snipe-it

Snipe-IT prior to version 5.4.3 is vulnerable to stored cross-site scripting because the input to the `checked_out_to` parameter is not escaped. The vulnerability is capable of stealing a user's cookie.

 https://cve.radiocsirt.org/vuln/gsd-2022-1445 gsd-2022-1445 2026-10-03T18:12:32.267347+00:00 gsd-2022-1445