https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T20:37:10.392636+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-214437 EUVD-2026-214437 2026-10-06T20:37:10.395549+00:00 EUVD-2026-214437 https://cve.radiocsirt.org/vuln/fkie_cve-2023-1885 fkie_cve-2023-1885 2026-10-06T20:37:10.395580+00:00

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12.

 https://cve.radiocsirt.org/vuln/ghsa-xxm6-ff3x-v4vm GHSA-xxm6-ff3x-v4vm — thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) via category field name parameter 2026-10-06T20:37:10.395610+00:00

Affected: Packagist: thorsten/phpmyfaq

thorsten/phpmyfaq prior to 3.1.12 is vulnerable to stored cross-site scripting (XSS) because it fails to sanitize user input in the `category field name` parameter. This has been fixed in 3.1.12.

 https://cve.radiocsirt.org/vuln/gsd-2023-1885 gsd-2023-1885 2026-10-06T20:37:10.395634+00:00 gsd-2023-1885