https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T21:16:44.229987+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-162163 EUVD-2026-162163 2026-10-10T21:16:44.234355+00:00 EUVD-2026-162163 https://cve.radiocsirt.org/vuln/fkie_cve-2023-50339 fkie_cve-2023-50339 2026-10-10T21:16:44.234402+00:00

Stored cross-site scripting vulnerability exists in the User Management (/admin/users) page of GROWI versions prior to v6.1.11. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the site using the product.

 https://cve.radiocsirt.org/vuln/ghsa-6f93-6gw8-j4vp GHSA-6f93-6gw8-j4vp 2026-10-10T21:16:44.234456+00:00

Stored cross-site scripting vulnerability exists in the User Management (/admin/users) page of GROWI versions prior to v6.1.11. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the site using the product.

 https://cve.radiocsirt.org/vuln/gsd-2023-50339 gsd-2023-50339 2026-10-10T21:16:44.234493+00:00 gsd-2023-50339 https://cve.radiocsirt.org/vuln/jvndb-2023-000123 jvndb-2023-000123 2026-10-10T21:16:44.234515+00:00

GROWI provided by WESEEK, Inc. contains multiple vulnerabilities listed below. <ul><li>Stored cross-site scripting vulnerability in the presentation feature (CWE-79) - CVE-2023-42436</li><li>Stored cross-site scripting vulnerability in the App Settings (/admin/app) page and the Markdown Settings (/admin/markdown) page (CWE-79) - CVE-2023-45737</li><li>Stored cross-site scripting vulnerability when processing profile images (CWE-79) - CVE-2023-45740</li><li>Cross-site request forgery vulnerability in the User settings (/me) page (CWE-352) - CVE-2023-46699</li><li>Stored cross-site scripting vulnerability exploiting a behavior of the XSS Filter (CWE-79) - CVE-2023-47215</li><li>Stored cross-site scripting vulnerability via the img tags (CWE-79) - CVE-2023-49119</li><li>Stored cross-site scripting vulnerability in the event handlers of the pre tags (CWE-79) - CVE-2023-49598</li><li>Stored cross-site scripting vulnerability in the anchor tag (CWE-79) - CVE-2023-49779</li><li>Stored cross-site scripting vulnerability when processing the MathJax (CWE-79) - CVE-2023-49807</li><li>Stored cross-site scripting vulnerability in the App Settings (/admin/app) page, the Markdown Settings (/admin/markdown) page, and the Customize (/admin/customize) page (CWE-79) - CVE-2023-50175</li><li>Cleartext storage of sensitive information vulnerability in the App Settings (/admin/app) page's Secret access key (CWE-312) - CVE-2023-50294</li><li>Improper authorization in the User Management (/admin/u…