https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T05:25:54.118108+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-375059 EUVD-2026-375059 2026-10-04T05:25:54.183790+00:00 EUVD-2026-375059 https://cve.radiocsirt.org/vuln/fkie_cve-2026-90561 fkie_cve-2026-90561 2026-10-04T05:25:54.183827+00:00

Strapi versions 4.x through 4.26.2 and 5.x before 5.48.1 contain a stored cross-site scripting vulnerability in the content manager WYSIWYG preview component that fails to strip script tags from rich text. An Author-role user can store malicious script tags in rich text fields that execute in an Editor or Super Admin's session when the preview pane is expanded, enabling account takeover.

 https://cve.radiocsirt.org/vuln/ghsa-jh7v-p6jw-jwhc GHSA-jh7v-p6jw-jwhc 2026-10-04T05:25:54.183859+00:00

Strapi versions 4.x through 4.26.2 and 5.x before 5.48.1 contain a stored cross-site scripting vulnerability in the content manager WYSIWYG preview component that fails to strip script tags from rich text. An Author-role user can store malicious script tags in rich text fields that execute in an Editor or Super Admin's session when the preview pane is expanded, enabling account takeover.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3324 WID-SEC-W-2026-3324 — Strapi: Schwachstelle ermöglicht Cross-Site Scripting 2026-10-04T05:25:54.183878+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Strapi ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.