https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-23T04:24:57.960638+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-316182 EUVD-2026-316182 2026-10-23T04:24:58.018004+00:00 EUVD-2026-316182 https://cve.radiocsirt.org/vuln/fkie_cve-2026-28558 fkie_cve-2026-28558 2026-10-23T04:24:58.018064+00:00

wpForo Forum 2.4.14 contains a stored cross-site scripting vulnerability that allows authenticated subscribers to upload SVG files as profile avatars through the avatar upload functionality. Attackers upload a crafted SVG containing CSS injection or JavaScript event handlers that execute in the browsers of any user who views the attacker's profile page.

 https://cve.radiocsirt.org/vuln/ghsa-p235-gwp9-pfq6 GHSA-p235-gwp9-pfq6 2026-10-23T04:24:58.018118+00:00

wpForo Forum 2.4.14 contains a stored cross-site scripting vulnerability that allows authenticated subscribers to upload SVG files as profile avatars through the avatar upload functionality. Attackers upload a crafted SVG containing CSS injection or JavaScript event handlers that execute in the browsers of any user who views the attacker's profile page.