https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-20T07:20:08.911861+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-61418 cnvd-2021-61418 2026-10-20T07:20:08.915046+00:00 cnvd-2021-61418 https://cve.radiocsirt.org/vuln/euvd-2026-29687 EUVD-2026-29687 2026-10-20T07:20:08.915078+00:00 EUVD-2026-29687 https://cve.radiocsirt.org/vuln/fkie_cve-2021-37392 fkie_cve-2021-37392 2026-10-20T07:20:08.915092+00:00

In RPCMS v1.8 and below, the "nickname" variable is not properly sanitized before being displayed on page. When the API functions are enabled, the attacker can use API to update user nickname with XSS payload and achieve stored XSS. Users who view the articles published by the injected user will trigger the XSS.

 https://cve.radiocsirt.org/vuln/ghsa-vxfx-x8fg-rmj4 GHSA-vxfx-x8fg-rmj4 2026-10-20T07:20:08.915121+00:00

In RPCMS v1.8 and below, the "nickname" variable is not properly sanitized before being displayed on page. When the API functions are enabled, the attacker can use API to update user nickname with XSS payload and achieve stored XSS. Users who view the articles published by the injected user will trigger the XSS.

 https://cve.radiocsirt.org/vuln/gsd-2021-37392 gsd-2021-37392 2026-10-20T07:20:08.915138+00:00 gsd-2021-37392