https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T08:20:27.687441+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-375102 EUVD-2026-375102 2026-10-10T08:20:27.689931+00:00 EUVD-2026-375102 https://cve.radiocsirt.org/vuln/fkie_cve-2026-91922 fkie_cve-2026-91922 2026-10-10T08:20:27.689965+00:00

Steedos Platform through 3.0.15-beta.47 contains a reflected cross-site scripting vulnerability in the anonymous /api/page/render endpoint that fails to properly escape query parameters in inline script elements. Attackers can craft malicious links with script-terminating sequences in the schemaApi or data parameters to execute arbitrary JavaScript in victim sessions and steal X-Auth-Token credentials.

 https://cve.radiocsirt.org/vuln/ghsa-925g-q5h8-6rmx GHSA-925g-q5h8-6rmx 2026-10-10T08:20:27.689997+00:00

Steedos Platform through 3.0.15-beta.47 contains a reflected cross-site scripting vulnerability in the anonymous /api/page/render endpoint that fails to properly escape query parameters in inline script elements. Attackers can craft malicious links with script-terminating sequences in the schemaApi or data parameters to execute arbitrary JavaScript in victim sessions and steal X-Auth-Token credentials.