https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-19T05:11:42.459900+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-58292 CVE-2024-58292 — XMB Forum 1.9.12.06 Persistent Cross-Site Scripting via Admin Templates 2026-10-19T05:11:42.475583+00:00

Affected: xmbforum2 XMB Forum

XMB Forum 1.9.12.06 contains a persistent cross-site scripting vulnerability that allows authenticated administrators to inject malicious JavaScript into templates and front page settings. Attackers can insert XSS payloads in footer templates and news ticker fields, enabling script execution for all forum users when pages are rendered.