https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T21:36:43.617808+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2022-4105 CVE-2022-4105 — Cross-site Scripting (XSS) - Stored in kiwitcms/kiwi 2026-10-02T21:36:43.619452+00:00

Affected: kiwitcms/kiwi

A stored XSS in a kiwi Test Plan can run malicious javascript which could be chained with an HTML injection to perform a UI redressing attack (clickjacking) and an HTML injection which disables the use of the history page.

 https://cve.radiocsirt.org/vuln/ghsa-hf94-8mx5-2vvj GHSA-hf94-8mx5-2vvj — Cross-site Scripting in kiwitcms 2026-10-02T21:36:43.619504+00:00

Affected: PyPI: kiwitcms

A stored XSS in a kiwi Test Plan can run malicious javascript which could be chained with an HTML injection to perform a UI redressing attack (clickjacking) and an HTML injection which disables the use of the history page.