https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T10:03:45.298560+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-352398 EUVD-2026-352398 2026-10-02T10:03:45.327902+00:00 EUVD-2026-352398 https://cve.radiocsirt.org/vuln/fkie_cve-2026-19744 fkie_cve-2026-19744 2026-10-02T10:03:45.327933+00:00

Cross-site Scripting in the Markdown renderer in maalfer Pentestify before 2.3.2 allows authenticated users to execute arbitrary JavaScript in the application origin via a Markdown link whose URL contains a double quote, which closes the anchor's href attribute because the renderer's sanitization step does not escape quotes

 https://cve.radiocsirt.org/vuln/ghsa-6hqx-4r22-f9m2 GHSA-6hqx-4r22-f9m2 2026-10-02T10:03:45.327965+00:00

Cross-site Scripting in the Markdown renderer in maalfer Pentestify before 2.3.2 allows authenticated users to execute arbitrary JavaScript in the application origin via a Markdown link whose URL contains a double quote, which closes the anchor's href attribute because the renderer's sanitization step does not escape quotes