https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-24T23:25:02.243165+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-8859 EUVD-2026-8859 2026-10-24T23:25:02.246112+00:00 EUVD-2026-8859 https://cve.radiocsirt.org/vuln/fkie_cve-2023-37611 fkie_cve-2023-37611 2026-10-24T23:25:02.246150+00:00

Cross Site Scripting (XSS) vulnerability in Neos CMS 8.3.3 allows a remote authenticated attacker to execute arbitrary code via a crafted SVG file to the neos/management/media component.

 https://cve.radiocsirt.org/vuln/ghsa-6qjf-7g3j-qx25 GHSA-6qjf-7g3j-qx25 — Neos CMS Cross Site Scripting vulnerability 2026-10-24T23:25:02.246181+00:00

Affected: Packagist: neos/media-browser

Cross Site Scripting (XSS) vulnerability in Neos CMS 8.3.3 allows a remote authenticated attacker to execute arbitrary code via a crafted SVG file uploaded to the `neos/management/media` component. To make use of this attack vector, the attacker must either be able to upload a maliciously crafted file or coerce someone with the needed access to upload said file to Neos. Even if such a file is uploaded and subsequently delivered, it is possible to use CSP to protect against attacks being executed from such a file.

 https://cve.radiocsirt.org/vuln/gsd-2023-37611 gsd-2023-37611 2026-10-24T23:25:02.246210+00:00 gsd-2023-37611