https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T00:45:24.212008+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-115911 EUVD-2026-115911 2026-10-09T00:45:24.214771+00:00 EUVD-2026-115911 https://cve.radiocsirt.org/vuln/fkie_cve-2011-2935 fkie_cve-2011-2935 2026-10-09T00:45:24.214811+00:00

Elgg through 1.7.10 has XSS

 https://cve.radiocsirt.org/vuln/ghsa-mcfm-j5g6-w26f GHSA-mcfm-j5g6-w26f — Elgg Reflected XSS Vulnerability 2026-10-09T00:45:24.214843+00:00

Affected: Packagist: elgg/elgg

### VULNERABILITY DESCRIPTION The `internalname` parameter is not properly sanitized, which allows attacker to conduct Cross Site Scripting attack. This may allow an attacker to create a specially crafted URL that would execute arbitrary script code in a victim's browser

### PROOF-OF-CONCEPT/EXPLOIT ```http http://localhost/pg/embed/media?internalname=%20%22onmouseover=%22alert%28/XSS/%29%22style=%22width:3000px!important;height:3000px!important;z-index:999999;position:absolute!important;left:0;top:0;%22%20x=%22 ```

 https://cve.radiocsirt.org/vuln/gsd-2011-2935 gsd-2011-2935 2026-10-09T00:45:24.214872+00:00 gsd-2011-2935