https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T15:03:04.738387+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-47716 CVE-2021-47716 — Orangescrum 1.8.0 Cross-Site Scripting via Authenticated Endpoints 2026-10-18T15:03:04.740173+00:00

Affected: orangescrum

Orangescrum 1.8.0 contains multiple cross-site scripting vulnerabilities that allow authenticated attackers to inject malicious scripts through various input parameters. Attackers can exploit parameters like 'projid', 'CS_message', and 'name' to execute arbitrary JavaScript code in victim's browsers by submitting crafted payloads through application endpoints.