https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T06:29:08.168705+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-331683 EUVD-2026-331683 2026-10-10T06:29:08.221566+00:00 EUVD-2026-331683 https://cve.radiocsirt.org/vuln/fkie_cve-2026-53907 fkie_cve-2026-53907 2026-10-10T06:29:08.221622+00:00

MCO is vulnerable to Stored Cross‑Site Scripting (XSS) via the application logo upload functionality. An attacker with the ability to change the application logo can upload a crafted SVG file containing malicious JavaScript code that is executed when the logo is rendered or opened.

Because vendor contact attempts were unsuccessful, the vulnerability has only been confirmed in version 25.3.3.1 but may also affect other versions.

 https://cve.radiocsirt.org/vuln/ghsa-r38x-66p9-p239 GHSA-r38x-66p9-p239 2026-10-10T06:29:08.221663+00:00

MCO is vulnerable to Stored Cross‑Site Scripting (XSS) via the application logo upload functionality. An attacker with the ability to change the application logo can upload a crafted SVG file containing malicious JavaScript code that is executed when the logo is rendered or opened.

Because vendor contact attempts were unsuccessful, the vulnerability has only been confirmed in version 25.3.3.1 but may also affect other versions.