https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T11:11:00.432787+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-262333 EUVD-2026-262333 2026-10-03T11:11:00.496796+00:00 EUVD-2026-262333 https://cve.radiocsirt.org/vuln/fkie_cve-2025-65187 fkie_cve-2025-65187 2026-10-03T11:11:00.496834+00:00

A Stored Cross Site Scripting vulnerability exists in CiviCRM before v6.7 in the Accounting Batches field. An authenticated user can inject malicious JavaScript into this field and it executes whenever the page is viewed.

 https://cve.radiocsirt.org/vuln/ghsa-cf64-8857-h96q GHSA-cf64-8857-h96q 2026-10-03T11:11:00.496866+00:00

A Stored Cross Site Scripting vulnerability exists in CiviCRM before v6.7 in the Accounting Batches field. An authenticated user can inject malicious JavaScript into this field and it executes whenever the page is viewed.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-65187 UBUNTU-CVE-2025-65187 2026-10-03T11:11:00.496882+00:00

Affected: Ubuntu:Pro:16.04:LTS: civicrm, Ubuntu:Pro:18.04:LTS: civicrm, Ubuntu:Pro:20.04:LTS: civicrm, Ubuntu:Pro:22.04:LTS: civicrm

A Stored Cross Site Scripting vulnerability exists in CiviCRM before v6.7 in the Accounting Batches field. An authenticated user can inject malicious JavaScript into this field and it executes whenever the page is viewed.