https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T16:40:59.905027+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-248770 EUVD-2026-248770 2026-10-10T16:40:59.907814+00:00 EUVD-2026-248770 https://cve.radiocsirt.org/vuln/fkie_cve-2025-36563 fkie_cve-2025-36563 2026-10-10T16:40:59.907848+00:00

Reflected cross-site scripting vulnerability exists in multiple versions of PowerCMS. If a product administrator accesses a crafted URL, an arbitrary script may be executed on the browser.

 https://cve.radiocsirt.org/vuln/ghsa-hrw8-p8vq-hx3r GHSA-hrw8-p8vq-hx3r 2026-10-10T16:40:59.907880+00:00

Reflected cross-site scripting vulnerability exists in multiple versions of PowerCMS. If a product administrator accesses a crafted URL, an arbitrary script may be executed on the browser.

 https://cve.radiocsirt.org/vuln/jvndb-2025-010408 jvndb-2025-010408 2026-10-10T16:40:59.907897+00:00

PowerCMS provided by Alfasado Inc. contains multiple vulnerabilities listed below. * Reflected cross-site scripting (CWE-79) - CVE-2025-36563 * Stored cross-site scripting (CWE-79) - CVE-2025-41391 * Path traversal in file uploading (CWE-22) - CVE-2025-41396 * Path traversal in backup restore (CWE-22) - CVE-2025-46359 * Improper neutralization of formula elements in a CSV file (CWE-1236) - CVE-2025-54752 * Unrestricted upload of file with dangerous type (CWE-434) - CVE-2025-54757 The following people of VCSLab - Viettel Cyber Security reported these vulnerabilities to JPCERT/CC. JPCERT/CC coordinated with the developer. thanhtt74 (Tran Thi Thanh) namdi (Do Ich Nam) quanlna2 (Le Nguyen Anh Quan)