https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-21T11:07:44.850617+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-318257 EUVD-2026-318257 2026-10-21T11:07:44.871850+00:00 EUVD-2026-318257 https://cve.radiocsirt.org/vuln/fkie_cve-2023-53950 fkie_cve-2023-53950 2026-10-21T11:07:44.871888+00:00

InnovaStudio WYSIWYG Editor 5.4 contains an unrestricted file upload vulnerability that allows attackers to bypass file extension restrictions through filename manipulation. Attackers can upload malicious ASP shells by using null byte techniques and alternate file extensions to circumvent upload controls in the asset manager.

 https://cve.radiocsirt.org/vuln/ghsa-cjf9-p6jj-3g6r GHSA-cjf9-p6jj-3g6r 2026-10-21T11:07:44.871922+00:00

InnovaStudio WYSIWYG Editor 5.4 contains an unrestricted file upload vulnerability that allows attackers to bypass file extension restrictions through filename manipulation. Attackers can upload malicious ASP shells by using null byte techniques and alternate file extensions to circumvent upload controls in the asset manager.