https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T12:07:47.447338+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-19162 EUVD-2026-19162 2026-10-10T12:07:47.452595+00:00 EUVD-2026-19162 https://cve.radiocsirt.org/vuln/fkie_cve-2022-38972 fkie_cve-2022-38972 2026-10-10T12:07:47.452637+00:00

Cross-site scripting vulnerability in Movable Type plugin A-Form versions prior to 4.1.1 (for Movable Type 7 Series) and versions prior to 3.9.1 (for Movable Type 6 Series) allows a remote unauthenticated attacker to inject an arbitrary script.

 https://cve.radiocsirt.org/vuln/ghsa-qx7m-g7vm-qw2r GHSA-qx7m-g7vm-qw2r 2026-10-10T12:07:47.452677+00:00

Cross-site scripting vulnerability in Movable Type plugin A-Form versions prior to 4.1.1 (for Movable Type 7 Series) and versions prior to 3.9.1 (for Movable Type 6 Series) allows a remote unauthenticated attacker to inject an arbitrary script.

 https://cve.radiocsirt.org/vuln/gsd-2022-38972 gsd-2022-38972 2026-10-10T12:07:47.452695+00:00 gsd-2022-38972 https://cve.radiocsirt.org/vuln/jvndb-2022-000070 jvndb-2022-000070 2026-10-10T12:07:47.452706+00:00

Movable Type plugin A-Form provided by ARK-Web co., ltd. contains a cross-site scripting vulnerability (CWE-79). hibiki moriyama of STNet, Incorporated reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.