https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T09:26:15.199740+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-355081 EUVD-2026-355081 2026-10-07T09:26:15.260249+00:00 EUVD-2026-355081 https://cve.radiocsirt.org/vuln/fkie_cve-2026-75872 fkie_cve-2026-75872 2026-10-07T09:26:15.260285+00:00

HTML Injection in the public subscription form in maalfer MailerUp before 1.1.3 allows unauthenticated remote attackers to have the application send a message carrying arbitrary HTML, to an attacker-chosen address and from the form owner's configured sending identity, via the first_name field of the subscription request, which is interpolated unescaped into the double opt-in verification email.

 https://cve.radiocsirt.org/vuln/ghsa-gj4p-rxxg-6jhm GHSA-gj4p-rxxg-6jhm 2026-10-07T09:26:15.260320+00:00

HTML Injection in the public subscription form in maalfer MailerUp before 1.1.3 allows unauthenticated remote attackers to have the application send a message carrying arbitrary HTML, to an attacker-chosen address and from the form owner's configured sending identity, via the first_name field of the subscription request, which is interpolated unescaped into the double opt-in verification email.