https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-27T23:19:14.196842+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-235299 EUVD-2026-235299 2026-10-27T23:19:14.199369+00:00 EUVD-2026-235299 https://cve.radiocsirt.org/vuln/fkie_cve-2022-38147 fkie_cve-2022-38147 2026-10-27T23:19:14.199401+00:00

Silverstripe silverstripe/framework through 4.11 allows XSS (issue 3 of 3).

 https://cve.radiocsirt.org/vuln/ghsa-vv3r-fxqp-vr3f GHSA-vv3r-fxqp-vr3f — XSS via uploaded gpx file 2026-10-27T23:19:14.199430+00:00

Affected: Packagist: silverstripe/assets

A malicious content author could upload a GPX file with a Javascript payload. The payload could then be executed by luring a legitimate user to view the file in a browser with support for GPX files. GPX is an XML-based format used to store GPS data.

By default, Silverstripe CMS will no longer allow GPX files to be uploaded to the assets area.

 https://cve.radiocsirt.org/vuln/gsd-2022-38147 gsd-2022-38147 2026-10-27T23:19:14.199455+00:00 gsd-2022-38147