https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-25T14:24:38.182776+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2019-04901 cnvd-2019-04901 2026-10-25T14:24:38.186208+00:00 cnvd-2019-04901 https://cve.radiocsirt.org/vuln/euvd-2026-60908 EUVD-2026-60908 2026-10-25T14:24:38.186240+00:00 EUVD-2026-60908 https://cve.radiocsirt.org/vuln/fkie_cve-2018-0698 fkie_cve-2018-0698 2026-10-25T14:24:38.186254+00:00

Cross-site scripting vulnerability in GROWI v3.2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

 https://cve.radiocsirt.org/vuln/ghsa-w79q-529c-v5v9 GHSA-w79q-529c-v5v9 2026-10-25T14:24:38.186280+00:00

Cross-site scripting vulnerability in GROWI v3.2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

 https://cve.radiocsirt.org/vuln/gsd-2018-0698 gsd-2018-0698 2026-10-25T14:24:38.186295+00:00 gsd-2018-0698 https://cve.radiocsirt.org/vuln/jvndb-2018-000137 jvndb-2018-000137 2026-10-25T14:24:38.186305+00:00

GROWI provided by WESEEK, Inc. contains a cross-site scripting vulnerability (CWE-79). The settings option for enabling and disabling the measures against cross-site scripting ("Enable XSS prevention" option) was introduced in v3.1.12. However, there was an issue with the implementation where the option looks enabled although the measures are disabled. This vulnerability was addressed in v3.2.4 according to the developer. Takashi Yoneuchi of The University of Tokyo College of Arts and Sciences reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.