https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 07:40:42 +0000 https://cve.radiocsirt.org/vuln/bdu:2015-01426 bdu:2015-01426 https://cve.radiocsirt.org/vuln/bdu:2015-01426 https://cve.radiocsirt.org/vuln/certa-2009-avi-024 certa-2009-avi-024 https://cve.radiocsirt.org/vuln/certa-2009-avi-024 https://cve.radiocsirt.org/vuln/euvd-2026-121444 EUVD-2026-121444 https://cve.radiocsirt.org/vuln/euvd-2026-121444 https://cve.radiocsirt.org/vuln/fkie_cve-2009-0257 <p>Multiple cross-site scripting (XSS) vulnerabilities in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) name and (2) content of indexed files to the (a) Indexed Search Engine (indexed_search) system extension; (b) unspecified test scripts in the ADOdb system extension; and (c) unspecified vectors in the Workspace module.</p> <p>Multiple cross-site scripting (XSS) vulnerabilities in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) name and (2) content of indexed files to the (a) Indexed Search Engine (indexed_search) system extension; (b) unspecified test scripts in the ADOdb system extension; and (c) unspecified vectors in the Workspace module.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2009-0257 https://cve.radiocsirt.org/vuln/ghsa-jxpx-9mq9-jjwg <p>Multiple cross-site scripting (XSS) vulnerabilities in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) name and (2) content of indexed files to the (a) Indexed Search Engine (indexed_search) system extension; (b) unspecified test scripts in the ADOdb system extension; and (c) unspecified vectors in the Workspace module.</p> <p>Multiple cross-site scripting (XSS) vulnerabilities in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) name and (2) content of indexed files to the (a) Indexed Search Engine (indexed_search) system extension; (b) unspecified test scripts in the ADOdb system extension; and (c) unspecified vectors in the Workspace module.</p> https://cve.radiocsirt.org/vuln/ghsa-jxpx-9mq9-jjwg https://cve.radiocsirt.org/vuln/gsd-2009-0257 gsd-2009-0257 https://cve.radiocsirt.org/vuln/gsd-2009-0257