https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T06:20:59.774807+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-212454 EUVD-2026-212454 2026-10-07T06:20:59.778066+00:00 EUVD-2026-212454 https://cve.radiocsirt.org/vuln/fkie_cve-2024-56923 fkie_cve-2024-56923 2026-10-07T06:20:59.778100+00:00

Stored Cross-Site Scripting (XSS) Vulnerability in the Categorization Option of My Subscriptions Functionality in Silverpeas Core 6.3.1 <= 6.4.1 allows a remote attacker to execute arbitrary JavaScript code. This is achieved by injecting a malicious payload into the Name field of a subscription. The attack can lead to session hijacking, data theft, or unauthorized actions when an admin user views the affected subscription.

 https://cve.radiocsirt.org/vuln/ghsa-788m-27g4-cf86 GHSA-788m-27g4-cf86 — Cross site scripting in Silverpeas Core 2026-10-07T06:20:59.778132+00:00

Affected: Maven: org.silverpeas.core:silverpeas-core

Stored Cross-Site Scripting (XSS) Vulnerability in the Categorization Option of My Subscriptions Functionality in Silverpeas Core 6.3.1 <= 6.4.1 allows a remote attacker to execute arbitrary JavaScript code. This is achieved by injecting a malicious payload into the Name field of a subscription. The attack can lead to session hijacking, data theft, or unauthorized actions when an admin user views the affected subscription.