https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T00:25:14.648772+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-207286 EUVD-2026-207286 2026-10-07T00:25:14.652778+00:00 EUVD-2026-207286 https://cve.radiocsirt.org/vuln/fkie_cve-2024-55451 fkie_cve-2024-55451 2026-10-07T00:25:14.652830+00:00

A Stored Cross-Site Scripting (XSS) vulnerability exists in authenticated SVG file upload and viewing functionality in UJCMS 9.6.3. The vulnerability arises from insufficient sanitization of embedded attributes in uploaded SVG files. When a maliciously crafted SVG file is viewed by other backend users, it allows authenticated attackers to execute arbitrary JavaScript in the context of other backend users' browsers, potentially leading to the theft of sensitive tokens.

 https://cve.radiocsirt.org/vuln/ghsa-f3g2-9hcq-jr47 GHSA-f3g2-9hcq-jr47 2026-10-07T00:25:14.652881+00:00

A Stored Cross-Site Scripting (XSS) vulnerability exists in authenticated SVG file upload and viewing functionality in UJCMS 9.6.3. The vulnerability arises from insufficient sanitization of embedded attributes in uploaded SVG files. When a maliciously crafted SVG file is viewed by other backend users, it allows authenticated attackers to execute arbitrary JavaScript in the context of other backend users' browsers, potentially leading to the theft of sensitive tokens.