https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T13:12:58.715521+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-366276 EUVD-2026-366276 2026-10-12T13:12:58.756437+00:00 EUVD-2026-366276 https://cve.radiocsirt.org/vuln/fkie_cve-2026-88868 fkie_cve-2026-88868 2026-10-12T13:12:58.756468+00:00

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in the LiveLinks plugin where title and description fields are stored without sanitization. A user with canStream permission can inject malicious scripts that execute in the browser of every visitor viewing the live-link page, including administrators, within the site origin.

 https://cve.radiocsirt.org/vuln/ghsa-9c2q-wpvm-f24r GHSA-9c2q-wpvm-f24r 2026-10-12T13:12:58.756499+00:00

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in the LiveLinks plugin where title and description fields are stored without sanitization. A user with canStream permission can inject malicious scripts that execute in the browser of every visitor viewing the live-link page, including administrators, within the site origin.