https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T18:24:54.644304+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-359339 EUVD-2026-359339 2026-10-06T18:24:58.236108+00:00 EUVD-2026-359339 https://cve.radiocsirt.org/vuln/fkie_cve-2026-79663 fkie_cve-2026-79663 2026-10-06T18:24:58.236156+00:00

Ech0 before 4.7.3 contains a stored cross-site scripting vulnerability in the public RSS feed where tag names and markdown content are rendered without HTML escaping. Attackers with admin privileges can inject malicious tag names or raw HTML in echo content that executes as JavaScript in RSS readers that render HTML-type summaries, affecting anonymous subscribers and other users.

 https://cve.radiocsirt.org/vuln/ghsa-9277-65xq-8gww GHSA-9277-65xq-8gww 2026-10-06T18:24:58.236195+00:00

Ech0 before 4.7.3 contains a stored cross-site scripting vulnerability in the public RSS feed where tag names and markdown content are rendered without HTML escaping. Attackers with admin privileges can inject malicious tag names or raw HTML in echo content that executes as JavaScript in RSS readers that render HTML-type summaries, affecting anonymous subscribers and other users.