https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T08:41:06.046560+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-256900 EUVD-2026-256900 2026-10-06T08:41:06.094361+00:00 EUVD-2026-256900 https://cve.radiocsirt.org/vuln/fkie_cve-2025-11682 fkie_cve-2025-11682 2026-10-06T08:41:06.094432+00:00

Stored cross-site scripting (XSS) vulnerability in the LMT Dashboard of the Perx Customer Engagement & Loyalty Platform allows an authenticated attacker to execute arbitrary JavaScript code in a victim's browser. The vulnerability is due to improper sanitization of SVG file uploads. An attacker can upload a malicious SVG file containing a script payload to a campaign. When another user views this image on the public LMT microsite, the script executes, which can lead to session hijacking, data theft, or other unauthorized actions.This issue affects Customer Engagement & Loyalty Platform before 4.617.4.

 https://cve.radiocsirt.org/vuln/ghsa-qxmp-vwjw-x542 GHSA-qxmp-vwjw-x542 2026-10-06T08:41:06.094468+00:00

Stored cross-site scripting (XSS) vulnerability in the LMT Dashboard of the Perx Customer Engagement & Loyalty Platform allows an authenticated attacker to execute arbitrary JavaScript code in a victim's browser. The vulnerability is due to improper sanitization of SVG file uploads. An attacker can upload a malicious SVG file containing a script payload to a campaign. When another user views this image on the public LMT microsite, the script executes, which can lead to session hijacking, data theft, or other unauthorized actions.This issue affects Customer Engagement & Loyalty Platform before 4.617.4.