https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T14:22:12.410490+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-262623 EUVD-2026-262623 2026-10-07T14:22:12.485733+00:00 EUVD-2026-262623 https://cve.radiocsirt.org/vuln/fkie_cve-2025-59117 fkie_cve-2025-59117 2026-10-07T14:22:12.485777+00:00

Windu CMS is vulnerable to multiple Stored Cross-Site Scripting (XSS) vulnerabilities in the page editing endpoint windu/admin/content/pages/edit/. This vulnerability can be exploited by a privileged user and may target users with higher privileges.

Only version 4.1 was tested and confirmed as vulnerable. This issue was fixed in version 4.1 build 2250.

 https://cve.radiocsirt.org/vuln/ghsa-pqxp-5v83-vg92 GHSA-pqxp-5v83-vg92 2026-10-07T14:22:12.485814+00:00

Windu CMS is vulnerable to multiple Stored Cross-Site Scripting (XSS) vulnerabilities in the page editing endpoint windu/admin/content/pages/edit/. This vulnerability can be exploited by a privileged user and may target users with higher privileges.

The vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or vulnerable version range. Only version 4.1 was tested and confirmed as vulnerable, other versions were not tested and might also be vulnerable.