https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T08:04:15.768512+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-260499 EUVD-2026-260499 2026-10-04T08:04:15.832768+00:00 EUVD-2026-260499 https://cve.radiocsirt.org/vuln/fkie_cve-2025-63420 fkie_cve-2025-63420 2026-10-04T08:04:15.832804+00:00

CrushFTP11 before 11.3.7_57 is vulnerable to stored HTML injection in the CrushFTP Admin Panel (Reports / "Who Created Folder"), enabling persistent HTML execution in admin sessions.

 https://cve.radiocsirt.org/vuln/ghsa-4pqv-hw6c-g45v GHSA-4pqv-hw6c-g45v 2026-10-04T08:04:15.832835+00:00

A stored cross-site scripting (XSS) vulnerability in the CrushFTP 11.3.7_50 Admin Panel (Reports / 'Who Created Folder') allows authenticated attackers with permissions to create folders to inject malicious HTML/JavaScript.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2530 WID-SEC-W-2025-2530 — CrushFTP: Schwachstelle ermöglicht Cross-Site Scripting 2026-10-04T08:04:15.832852+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in CrushFTP ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.