https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T01:48:46.724196+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-252497 EUVD-2026-252497 2026-10-06T01:48:46.757609+00:00 EUVD-2026-252497 https://cve.radiocsirt.org/vuln/fkie_cve-2025-40693 fkie_cve-2025-40693 2026-10-06T01:48:46.757648+00:00

Stored Cross Site Scripting in Online Fire Reporting System v1.2 by PHPGurukul, that consists in a reflected and stored authenticated XSS due to the lack of propper validation of user inputs 'tname' parameter via GET and, 'teamleadname', 'teammember' and 'teamname'

parameters via POST at the endpoint '/ofrs/admin/edit-team.php'. This vulnerability could allow a remote user to send a specially crafted query to an authenticated user and steal its cookie session details.

 https://cve.radiocsirt.org/vuln/ghsa-29mw-f55p-xcww GHSA-29mw-f55p-xcww 2026-10-06T01:48:46.757687+00:00

Stored Cross Site Scripting in Online Fire Reporting System v1.2 by PHPGurukul, that consists in a reflected and stored authenticated XSS due to the lack of propper validation of user inputs 'tname' parameter via GET and, 'teamleadname', 'teammember' and 'teamname'

parameters via POST at the endpoint '/ofrs/admin/edit-team.php'. This vulnerability could allow a remote user to send a specially crafted query to an authenticated user and steal its cookie session details.