https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-24T12:38:53.759770+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-255411 EUVD-2026-255411 2026-10-24T12:38:53.763674+00:00 EUVD-2026-255411 https://cve.radiocsirt.org/vuln/fkie_cve-2025-61417 fkie_cve-2025-61417 2026-10-24T12:38:53.763718+00:00

Cross-Site Scripting (XSS) vulnerability exists in TastyIgniter 3.7.7, affecting the /admin/media_manager component. Attackers can upload a malicious SVG file containing JavaScript code. When an administrator previews the file, the code executes in their browser context, allowing the attacker to perform unauthorized actions such as modifying the admin account credentials.

 https://cve.radiocsirt.org/vuln/ghsa-4vrf-42cm-7xfw GHSA-4vrf-42cm-7xfw — TastyIgniter vulnerable to Cross-Site Scripting 2026-10-24T12:38:53.763785+00:00

Affected: Packagist: tastyigniter/tastyigniter

Cross-Site Scripting (XSS) vulnerability exists in TastyIgniter 3.7.7, affecting the /admin/media_manager component. Attackers can upload a malicious SVG file containing JavaScript code. When an administrator previews the file, the code executes in their browser context, allowing the attacker to perform unauthorized actions such as modifying the admin account credentials.