https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-21T23:13:56.434726+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-18608 cnvd-2018-18608 2026-10-21T23:13:56.438697+00:00 cnvd-2018-18608 https://cve.radiocsirt.org/vuln/euvd-2026-60925 EUVD-2026-60925 2026-10-21T23:13:56.438734+00:00 EUVD-2026-60925 https://cve.radiocsirt.org/vuln/fkie_cve-2018-0654 fkie_cve-2018-0654 2026-10-21T23:13:56.438749+00:00

Cross-site scripting vulnerability in GROWI v.3.1.11 and earlier allows remote attackers to inject arbitrary web script or HTML via the modal for creating Wiki page.

 https://cve.radiocsirt.org/vuln/ghsa-jjxv-8f49-rc85 GHSA-jjxv-8f49-rc85 2026-10-21T23:13:56.438778+00:00

Cross-site scripting vulnerability in GROWI v.3.1.11 and earlier allows remote attackers to inject arbitrary web script or HTML via the modal for creating Wiki page.

 https://cve.radiocsirt.org/vuln/gsd-2018-0654 gsd-2018-0654 2026-10-21T23:13:56.438794+00:00 gsd-2018-0654 https://cve.radiocsirt.org/vuln/jvndb-2018-000085 jvndb-2018-000085 2026-10-21T23:13:56.438805+00:00

GROWI provided by WESEEK, Inc. contains multiple cross-site scripting vulnerabilities listed below. * Stored cross-site scripting vulnerability in the UserGroup Management section of admin page (CWE-79) - CVE-2018-0652 * Stored cross-site scripting vulnerability in Wiki page view (CWE-79) - CVE-2018-0653 * Reflected cross-site scripting vulnerability in the modal for creating Wiki page (CWE-79) - CVE-2018-0654 * Stored cross-site scripting in the app settings section of admin page (CWE-79) - CVE-2018-0655 The following researchers reported the vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2018-0652, CVE-2018-0653 Yoshinori Hayashi of Information Science College CVE-2018-0654, CVE-2018-0655 Kanta Nishitani of Information Science College