https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-23T16:42:14.163717+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-54398 EUVD-2026-54398 2026-10-23T16:42:14.235847+00:00 EUVD-2026-54398 https://cve.radiocsirt.org/vuln/fkie_cve-2019-11537 fkie_cve-2019-11537 2026-10-23T16:42:14.235894+00:00

In osTicket before 1.12, XSS exists via /upload/file.php, /upload/scp/users.php?do=import-users, and /upload/scp/ajax.php/users/import if an agent manager user uploads a crafted .csv file to the User Importer, because file contents can appear in an error message. The XSS can lead to local file inclusion.

 https://cve.radiocsirt.org/vuln/ghsa-wgp7-ggjx-64hq GHSA-wgp7-ggjx-64hq 2026-10-23T16:42:14.235940+00:00

In osTicket before 1.12, XSS exists via /upload/file.php, /upload/scp/users.php?do=import-users, and /upload/scp/ajax.php/users/import if an agent manager user uploads a crafted .csv file to the User Importer, because file contents can appear in an error message. The XSS can lead to local file inclusion.

 https://cve.radiocsirt.org/vuln/gsd-2019-11537 gsd-2019-11537 2026-10-23T16:42:14.235969+00:00 gsd-2019-11537