https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T19:08:38.917615+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-254091 EUVD-2026-254091 2026-10-10T19:08:38.974552+00:00 EUVD-2026-254091 https://cve.radiocsirt.org/vuln/fkie_cve-2025-60451 fkie_cve-2025-60451 2026-10-10T19:08:38.974589+00:00

A stored Cross-Site Scripting (XSS) vulnerability has been discovered in MetInfo CMS version 8.0. The vulnerability exists due to insufficient validation and sanitization of SVG file uploads in the app\system\include\module\uploadify.class.php component, specifically in the website settings module. This security flaw allows attackers to upload malicious SVG files containing JavaScript code that executes when the uploaded file is viewed or accessed.

 https://cve.radiocsirt.org/vuln/ghsa-9v7c-8rmf-hx9p GHSA-9v7c-8rmf-hx9p 2026-10-10T19:08:38.974622+00:00

A stored Cross-Site Scripting (XSS) vulnerability has been discovered in MetInfo CMS version 8.0. The vulnerability exists due to insufficient validation and sanitization of SVG file uploads in the app\system\include\module\uploadify.class.php component, specifically in the website settings module. This security flaw allows attackers to upload malicious SVG files containing JavaScript code that executes when the uploaded file is viewed or accessed.