https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T21:28:50.490503+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-21914 EUVD-2026-21914 2026-10-18T21:28:50.570512+00:00 EUVD-2026-21914 https://cve.radiocsirt.org/vuln/fkie_cve-2021-20829 fkie_cve-2021-20829 2026-10-18T21:28:50.570556+00:00

Cross-site scripting vulnerability due to the inadequate tag sanitization in GROWI versions v4.2.19 and earlier allows remote attackers to execute an arbitrary script on the web browser of the user who accesses a specially crafted page.

 https://cve.radiocsirt.org/vuln/ghsa-xjjw-7hwm-mx4p GHSA-xjjw-7hwm-mx4p 2026-10-18T21:28:50.570587+00:00

Cross-site scripting vulnerability due to the inadequate tag sanitization in GROWI versions v4.2.19 and earlier allows remote attackers to execute an arbitrary script on the web browser of the user who accesses a specially crafted page.

 https://cve.radiocsirt.org/vuln/gsd-2021-20829 gsd-2021-20829 2026-10-18T21:28:50.570603+00:00 gsd-2021-20829 https://cve.radiocsirt.org/vuln/jvndb-2021-001123 jvndb-2021-001123 2026-10-18T21:28:50.570614+00:00

GROWI provided by WESEEK, Inc. contains multiple vulnerabilities listed below. Stored Cross-site Scripting (CWE-79) - CVE-2021-20667 Path Traversal (CWE-22) - CVE-2021-20668 Path Traversal (CWE-22) - CVE-2021-20669 Improper Access Control (CWE-284) - CVE-2021-20670 Improper Input Validation (CWE-20) - CVE-2021-20671 Site Scripting (CWE-79) - CVE-2021-20829 stypr of Flatt Security Inc. reported these vulnerabilities to the developer and coordinated on his own. After coordination was completed, this case was reported to JPCERT/CC, and JPCERT/CC coordinated with the developer for the publication.