https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T08:16:08.000027+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-374978 EUVD-2026-374978 2026-10-08T08:16:08.050265+00:00 EUVD-2026-374978 https://cve.radiocsirt.org/vuln/fkie_cve-2026-82451 fkie_cve-2026-82451 2026-10-08T08:16:08.050303+00:00

Formwork before 2.3.11 contains a stored cross-site scripting vulnerability in visit tracking that records the Referer header host unescaped. Unauthenticated attackers can craft malicious Referer headers to inject markup that executes in administrator browsers when viewing the Statistics panel.

 https://cve.radiocsirt.org/vuln/ghsa-3p45-hx6j-c7f5 GHSA-3p45-hx6j-c7f5 2026-10-08T08:16:08.050337+00:00

Formwork through 2.3.14 contains a stored cross-site scripting vulnerability in visit tracking that records the Referer header host unescaped. Unauthenticated attackers can craft malicious Referer headers to inject markup that executes in administrator browsers when viewing the Statistics panel.