https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T22:19:12.052788+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-59115 CVE-2025-59115 — Stored XSS in Windu CMS 2026-10-05T22:19:12.083720+00:00

Affected: JCD Windu CMS

Windu CMS is vulnerable to Stored Cross-Site Scripting (XSS) in the logon page where input data has no proper validation. Malicious attacker can inject arbitrary HTML and JS into website, which will be rendered/executed when visiting logs page by admin.

Only version 4.1 was tested and confirmed as vulnerable. This issue was fixed in version 4.1 build 2250.