https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T04:22:18.359779+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-25203 CVE-2025-25203 — Ctrlpanel has stored XSS vulnerability in TicketsController priority field 2026-10-06T04:22:18.361839+00:00

Affected: Ctrlpanel-gg panel

CtrlPanel is open-source billing software for hosting providers. Prior to version 1.0, a Cross-Site Scripting (XSS) vulnerability exists in the `TicketsController` and `Moderation/TicketsController` due to insufficient input validation on the `priority` field during ticket creation and unsafe rendering of this field in the moderator panel. Version 1.0 contains a patch for the issue.