https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T10:28:11.340639+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-254006 EUVD-2026-254006 2026-10-06T10:28:11.396051+00:00 EUVD-2026-254006 https://cve.radiocsirt.org/vuln/fkie_cve-2025-40991 fkie_cve-2025-40991 2026-10-06T10:28:11.396095+00:00

Stored Cross Site Scripting vulnerability in Ekushey CRM v5.0 by Creativeitem, due to lack of proper validation of user inputs via the "/ekushey/index.php/client/project_file/upload/xxxx", affecting to "description" parameter via POST. This vulnerability could allow a remote attacker to send a specially crafted query to an authenticated user and steal his/her cookie session details.

 https://cve.radiocsirt.org/vuln/ghsa-vcmf-x83r-j6x3 GHSA-vcmf-x83r-j6x3 2026-10-06T10:28:11.396134+00:00

Stored Cross Site Scripting vulnerability in Ekushey CRM v5.0 by Creativeitem, due to lack of proper validation of user inputs via the "/ekushey/index.php/client/project_file/upload/xxxx", affecting to "description" parameter via POST. This vulnerability could allow a remote attacker to send a specially crafted query to an authenticated user and steal his/her cookie session details.