https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-24T05:22:38.232963+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-85526 cnvd-2022-85526 2026-10-24T05:22:38.235954+00:00 cnvd-2022-85526 https://cve.radiocsirt.org/vuln/euvd-2026-235307 EUVD-2026-235307 2026-10-24T05:22:38.235988+00:00 EUVD-2026-235307 https://cve.radiocsirt.org/vuln/fkie_cve-2022-37429 fkie_cve-2022-37429 2026-10-24T05:22:38.236001+00:00

Silverstripe silverstripe/framework through 4.11 allows XSS (issue 1 of 2) via JavaScript payload to the href attribute of a link by splitting a javascript URL with white space characters.

 https://cve.radiocsirt.org/vuln/ghsa-wc6r-4ggc-79w5 GHSA-wc6r-4ggc-79w5 — Stored XSS using HTMLEditor 2026-10-24T05:22:38.236027+00:00

Affected: Packagist: silverstripe/framework

A malicious content author could add a JavaScript payload to the href attribute of a link by splitting a javascript URL with white space characters.

An attacker must have access to the CMS to exploit this issue.

 https://cve.radiocsirt.org/vuln/gsd-2022-37429 gsd-2022-37429 2026-10-24T05:22:38.236051+00:00 gsd-2022-37429