https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-23T01:59:43.239663+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2024-36342 cnvd-2024-36342 2026-10-23T01:59:43.242413+00:00 cnvd-2024-36342 https://cve.radiocsirt.org/vuln/euvd-2026-159069 EUVD-2026-159069 2026-10-23T01:59:43.242447+00:00 EUVD-2026-159069 https://cve.radiocsirt.org/vuln/fkie_cve-2024-43006 fkie_cve-2024-43006 2026-10-23T01:59:43.242461+00:00

A stored cross-site scripting (XSS) vulnerability exists in ZZCMS2023 in the ask/show.php file at line 21. An attacker can exploit this vulnerability by sending a specially crafted POST request to /user/ask_edit.php?action=add, which includes malicious JavaScript code in the 'content' parameter. When a user visits the ask/show_{newsid}.html page, the injected script is executed in the context of the user's browser, leading to potential theft of cookies, session tokens, or other sensitive information.

 https://cve.radiocsirt.org/vuln/ghsa-43p9-cg2h-73x3 GHSA-43p9-cg2h-73x3 2026-10-23T01:59:43.242493+00:00

A stored cross-site scripting (XSS) vulnerability exists in ZZCMS2023 in the ask/show.php file at line 21. An attacker can exploit this vulnerability by sending a specially crafted POST request to /user/ask_edit.php?action=add, which includes malicious JavaScript code in the 'content' parameter. When a user visits the ask/show_{newsid}.html page, the injected script is executed in the context of the user's browser, leading to potential theft of cookies, session tokens, or other sensitive information.