https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T07:02:59.035150+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-131989 EUVD-2026-131989 2026-10-07T07:02:59.099546+00:00 EUVD-2026-131989 https://cve.radiocsirt.org/vuln/fkie_cve-2008-7214 fkie_cve-2008-7214 2026-10-07T07:02:59.099585+00:00

Cross-site request forgery (CSRF) vulnerability in administrator/index2.php in MOStlyCE before 2.4, as used in Mambo 4.6.3 and earlier, allows remote attackers to hijack the authentication of administrators for requests that add new administrator accounts via the save task in a com_users action, as demonstrated using a separate XSS vulnerability in mambots/editors/mostlyce/jscripts/tiny_mce/filemanager/connectors/php/connector.php.

 https://cve.radiocsirt.org/vuln/ghsa-g26h-7j58-88wq GHSA-g26h-7j58-88wq 2026-10-07T07:02:59.099619+00:00

Cross-site request forgery (CSRF) vulnerability in administrator/index2.php in MOStlyCE before 2.4, as used in Mambo 4.6.3 and earlier, allows remote attackers to hijack the authentication of administrators for requests that add new administrator accounts via the save task in a com_users action, as demonstrated using a separate XSS vulnerability in mambots/editors/mostlyce/jscripts/tiny_mce/filemanager/connectors/php/connector.php.

 https://cve.radiocsirt.org/vuln/gsd-2008-7214 gsd-2008-7214 2026-10-07T07:02:59.099638+00:00 gsd-2008-7214