https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T12:10:01.122397+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-229071 EUVD-2026-229071 2026-10-02T12:10:01.127973+00:00 EUVD-2026-229071 https://cve.radiocsirt.org/vuln/fkie_cve-2022-4638 fkie_cve-2022-4638 2026-10-02T12:10:01.128009+00:00

A vulnerability classified as problematic was found in collective.contact.widget up to 1.12. This vulnerability affects the function title of the file src/collective/contact/widget/widgets.py. The manipulation leads to cross site scripting. The attack can be initiated remotely. The name of the patch is 5da36305ca7ed433782be8901c47387406fcda12. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-216496.

 https://cve.radiocsirt.org/vuln/ghsa-5pqf-rvm7-3wgw GHSA-5pqf-rvm7-3wgw — collective.contact.widget is vulnerable to cross-site scripting 2026-10-02T12:10:01.128043+00:00

Affected: PyPI: collective.contact.widget

collective.contact.widget is an add-on is part of the collective.contact.* suite. A vulnerability classified as problematic was found in collective.contact.widget up to 1.12. This vulnerability affects the function title of the file src/collective/contact/widget/widgets.py. The manipulation leads to cross site scripting. The attack can be initiated remotely. The name of the patch is 5da36305ca7ed433782be8901c47387406fcda12. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-216496.

 https://cve.radiocsirt.org/vuln/gsd-2022-4638 gsd-2022-4638 2026-10-02T12:10:01.128072+00:00 gsd-2022-4638 https://cve.radiocsirt.org/vuln/pysec-2022-42988 PYSEC-2022-42988 2026-10-02T12:10:01.128085+00:00

Affected: PyPI: collective-contact-widget

A vulnerability classified as problematic was found in collective.contact.widget up to 1.12. This vulnerability affects the function title of the file src/collective/contact/widget/widgets.py. The manipulation leads to cross site scripting. The attack can be initiated remotely. The name of the patch is 5da36305ca7ed433782be8901c47387406fcda12. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-216496.