https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T12:58:00.491893+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-27970 EUVD-2026-27970 2026-10-09T12:58:00.494439+00:00 EUVD-2026-27970 https://cve.radiocsirt.org/vuln/fkie_cve-2021-32573 fkie_cve-2021-32573 2026-10-09T12:58:00.494471+00:00

The express-cart package through 1.1.10 for Node.js allows Reflected XSS (for an admin) via a user input field for product options. NOTE: the vendor states that this "would rely on an admin hacking his/her own website.

 https://cve.radiocsirt.org/vuln/ghsa-mpgq-6jmr-6c67 GHSA-mpgq-6jmr-6c67 — Cross-site Scripting in express-cart 2026-10-09T12:58:00.494503+00:00

The express-cart package through 1.1.10 for Node.js allows Reflected XSS (for an admin) via a user input field for product options. NOTE: the vendor states that this "would rely on an admin hacking his/her own website."

 https://cve.radiocsirt.org/vuln/gsd-2021-32573 gsd-2021-32573 2026-10-09T12:58:00.494520+00:00 gsd-2021-32573