https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T15:05:52.578232+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-235987 EUVD-2026-235987 2026-10-12T15:05:56.301718+00:00 EUVD-2026-235987 https://cve.radiocsirt.org/vuln/fkie_cve-2021-25986 fkie_cve-2021-25986 2026-10-12T15:05:56.301766+00:00

In Django-wiki, versions 0.0.20 to 0.7.8 are vulnerable to Stored Cross-Site Scripting (XSS) in Notifications Section. An attacker who has access to edit pages can inject JavaScript payload in the title field. When a victim gets a notification regarding the changes made in the application, the payload in the notification panel renders and loads external JavaScript.

 https://cve.radiocsirt.org/vuln/ghsa-3m3h-v9hv-9j4h GHSA-3m3h-v9hv-9j4h — Cross-site Scripting in django-wiki 2026-10-12T15:05:56.301819+00:00

Affected: PyPI: wiki

In Django-wiki, versions 0.0.20 to 0.7.8 are vulnerable to Stored Cross-Site Scripting (XSS) in Notifications Section. An attacker who has access to edit pages can inject JavaScript payload in the title field. When a victim gets a notification regarding the changes made in the application, the payload in the notification panel renders and loads external JavaScript.

 https://cve.radiocsirt.org/vuln/gsd-2021-25986 gsd-2021-25986 2026-10-12T15:05:56.301864+00:00 gsd-2021-25986 https://cve.radiocsirt.org/vuln/pysec-2021-850 PYSEC-2021-850 2026-10-12T15:05:56.302053+00:00

Affected: PyPI: wiki

In Django-wiki, versions 0.0.20 to 0.7.8 are vulnerable to Stored Cross-Site Scripting (XSS) in Notifications Section. An attacker who has access to edit pages can inject JavaScript payload in the title field. When a victim gets a notification regarding the changes made in the application, the payload in the notification panel renders and loads external JavaScript.