https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T18:29:24.747654+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-18943 EUVD-2026-18943 2026-10-09T18:29:24.769744+00:00 EUVD-2026-18943 https://cve.radiocsirt.org/vuln/fkie_cve-2022-38089 fkie_cve-2022-38089 2026-10-09T18:29:24.769783+00:00

Stored cross-site scripting vulnerability in Exment ((PHP8) exceedone/exment v5.0.2 and earlier and exceedone/laravel-admin v3.0.0 and earlier, (PHP7) exceedone/exment v4.4.2 and earlier and exceedone/laravel-admin v2.2.2 and earlier) allows a remote authenticated attacker to inject an arbitrary script.

 https://cve.radiocsirt.org/vuln/ghsa-j9wf-qqm9-mw2c GHSA-j9wf-qqm9-mw2c 2026-10-09T18:29:24.769818+00:00

Stored cross-site scripting vulnerability in Exment ((PHP8) exceedone/exment v5.0.2 and earlier and exceedone/laravel-admin v3.0.0 and earlier, (PHP7) exceedone/exment v4.4.2 and earlier and exceedone/laravel-admin v2.2.2 and earlier) allows a remote authenticated attacker to inject an arbitrary script.

 https://cve.radiocsirt.org/vuln/gsd-2022-38089 gsd-2022-38089 2026-10-09T18:29:24.769835+00:00 gsd-2022-38089 https://cve.radiocsirt.org/vuln/jvndb-2022-000065 jvndb-2022-000065 2026-10-09T18:29:24.769846+00:00

Exment provided by Kajitori Co.,Ltd contains multiple vulnerabilities listed below. * Reflected cross-site scripting (CWE-79) - CVE-2022-38080 * SQL injection (CWE-89) - CVE-2022-37333 * Stored cross-site scripting (CWE-79) - CVE-2022-38089 CVE-2022-38080, CVE-2022-37333 Hibiki Moriyama of STNet, Incorporated reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2022-38089 Yuya Chudo of N.F.Laboratories Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.