https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T18:35:51.394029+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-229131 EUVD-2026-229131 2026-10-02T18:35:51.471123+00:00 EUVD-2026-229131 https://cve.radiocsirt.org/vuln/fkie_cve-2022-4105 fkie_cve-2022-4105 2026-10-02T18:35:51.471164+00:00

A stored XSS in a kiwi Test Plan can run malicious javascript which could be chained with an HTML injection to perform a UI redressing attack (clickjacking) and an HTML injection which disables the use of the history page.

 https://cve.radiocsirt.org/vuln/ghsa-hf94-8mx5-2vvj GHSA-hf94-8mx5-2vvj — Cross-site Scripting in kiwitcms 2026-10-02T18:35:51.471208+00:00

Affected: PyPI: kiwitcms

A stored XSS in a kiwi Test Plan can run malicious javascript which could be chained with an HTML injection to perform a UI redressing attack (clickjacking) and an HTML injection which disables the use of the history page.

 https://cve.radiocsirt.org/vuln/gsd-2022-4105 gsd-2022-4105 2026-10-02T18:35:51.471255+00:00 gsd-2022-4105 https://cve.radiocsirt.org/vuln/pysec-2026-837 PYSEC-2026-837 — Cross-site Scripting in kiwitcms 2026-10-02T18:35:51.471269+00:00

Affected: PyPI: kiwitcms

A stored XSS in a kiwi Test Plan can run malicious javascript which could be chained with an HTML injection to perform a UI redressing attack (clickjacking) and an HTML injection which disables the use of the history page.