https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T12:33:48.700285+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-280776 EUVD-2026-280776 2026-10-08T12:33:48.749849+00:00 EUVD-2026-280776 https://cve.radiocsirt.org/vuln/fkie_cve-2020-36956 fkie_cve-2020-36956 2026-10-08T12:33:48.749890+00:00

Openfire 4.6.0 contains a stored cross-site scripting vulnerability in the nodejs plugin that allows attackers to inject malicious scripts through the 'path' parameter. Attackers can craft a payload with script tags to execute arbitrary JavaScript in the context of administrative users viewing the nodejs configuration page.

 https://cve.radiocsirt.org/vuln/ghsa-jvw5-qpx8-w3wx GHSA-jvw5-qpx8-w3wx 2026-10-08T12:33:48.749925+00:00

Openfire 4.6.0 contains a stored cross-site scripting vulnerability in the nodejs plugin that allows attackers to inject malicious scripts through the 'path' parameter. Attackers can craft a payload with script tags to execute arbitrary JavaScript in the context of administrative users viewing the nodejs configuration page.