https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T04:35:27.279278+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-164581 EUVD-2026-164581 2026-10-18T04:35:27.340956+00:00 EUVD-2026-164581 https://cve.radiocsirt.org/vuln/fkie_cve-2018-18694 fkie_cve-2018-18694 2026-10-18T04:35:27.340995+00:00

admin/index.php?id=filesmanager in Monstra CMS 3.0.4 allows remote authenticated administrators to trigger stored XSS via JavaScript content in a file whose name lacks an extension. Such a file is interpreted as text/html in certain cases.

 https://cve.radiocsirt.org/vuln/ghsa-x665-x9vv-q832 GHSA-x665-x9vv-q832 2026-10-18T04:35:27.341027+00:00

admin/index.php?id=filesmanager in Monstra CMS 3.0.4 allows remote authenticated administrators to trigger stored XSS via JavaScript content in a file whose name lacks an extension. Such a file is interpreted as text/html in certain cases.

 https://cve.radiocsirt.org/vuln/gsd-2018-18694 gsd-2018-18694 2026-10-18T04:35:27.341052+00:00 gsd-2018-18694