https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T15:00:53.619345+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2026-25133 cnvd-2026-25133 2026-10-07T15:00:53.669782+00:00 cnvd-2026-25133 https://cve.radiocsirt.org/vuln/euvd-2026-321083 EUVD-2026-321083 2026-10-07T15:00:53.669835+00:00 EUVD-2026-321083 https://cve.radiocsirt.org/vuln/fkie_cve-2021-47955 fkie_cve-2021-47955 2026-10-07T15:00:53.669863+00:00

CouchCMS 2.2.1 contains a cross-site scripting vulnerability that allows authenticated attackers to execute arbitrary JavaScript by uploading malicious SVG files through the file upload functionality. Attackers can upload SVG files containing embedded script tags to the browse.php endpoint, which are then executed in users' browsers when the files are accessed or previewed.

 https://cve.radiocsirt.org/vuln/ghsa-7q3g-gccm-822q GHSA-7q3g-gccm-822q 2026-10-07T15:00:53.669911+00:00

CouchCMS 2.2.1 contains a cross-site scripting vulnerability that allows authenticated attackers to execute arbitrary JavaScript by uploading malicious SVG files through the file upload functionality. Attackers can upload SVG files containing embedded script tags to the browse.php endpoint, which are then executed in users' browsers when the files are accessed or previewed.