https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T20:51:31.039121+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2022-39331 CVE-2022-39331 — Cross-site Scripting (XSS) in Nexcloud Desktop Client 2026-10-03T20:51:31.055557+00:00

Affected: nextcloud security-advisories

Nexcloud desktop is the Desktop sync client for Nextcloud. An attacker can inject arbitrary HyperText Markup Language into the Desktop Client application in the notifications. It is recommended that the Nextcloud Desktop client is upgraded to 3.6.1. There are no known workarounds for this issue.