https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T02:15:25.327022+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-4648 CVE-2025-4648 — A user with elevated privileges can inject XSS by altering the content of a SVG media during the submit request. 2026-10-08T02:15:25.328546+00:00

Affected: Centreon web

The content of a SVG file, received as input

in Centreon web, was not properly checked. Allows Reflected XSS. A user with elevated privileges can inject JS script by altering the content of a SVG media, during the submit request. This issue affects web: from 24.10.0 before 24.10.5, from 24.04.0 before 24.04.11, from 23.10.0 before 23.10.22, from 23.04.0 before 23.04.27, from 22.10.0 before 22.10.29.