https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-20T03:29:12.003685+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-72025 EUVD-2026-72025 2026-10-20T03:29:12.006811+00:00 EUVD-2026-72025 https://cve.radiocsirt.org/vuln/fkie_cve-2017-2123 fkie_cve-2017-2123 2026-10-20T03:29:12.006842+00:00

Cross-site scripting vulnerability in OneThird CMS v1.73 Heaven's Door and earlier allows remote attackers to inject arbitrary web script or HTML via language.php.

 https://cve.radiocsirt.org/vuln/ghsa-cvj5-vv5v-wm45 GHSA-cvj5-vv5v-wm45 2026-10-20T03:29:12.006871+00:00

Cross-site scripting vulnerability in OneThird CMS v1.73 Heaven's Door and earlier allows remote attackers to inject arbitrary web script or HTML via language.php.

 https://cve.radiocsirt.org/vuln/gsd-2017-2123 gsd-2017-2123 2026-10-20T03:29:12.006888+00:00 gsd-2017-2123 https://cve.radiocsirt.org/vuln/jvndb-2017-000042 jvndb-2017-000042 2026-10-20T03:29:12.006899+00:00

OneThird CMS provided by SpiQe Software contains a cross-site scripting vulnerability (CWE-79) due to an issue in processing the language selection screen. Note that this vulnerability is different from JVN#13003724. Satoshi Ogawa of Mitsui Bussan Secure Directions,Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.