https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 24 Oct 2026 05:21:26 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-100737 EUVD-2026-100737 https://cve.radiocsirt.org/vuln/euvd-2026-100737 https://cve.radiocsirt.org/vuln/fkie_cve-2014-5441 <p>Multiple cross-site scripting (XSS) vulnerabilities in app/views/layouts/application.html.haml in Fat Free CRM before 0.13.3 allow remote attackers to inject arbitrary web script or HTML via the (1) username, (2) first name, or (3) last name in a (a) create or (b) edit user action.</p> <p>Multiple cross-site scripting (XSS) vulnerabilities in app/views/layouts/application.html.haml in Fat Free CRM before 0.13.3 allow remote attackers to inject arbitrary web script or HTML via the (1) username, (2) first name, or (3) last name in a (a) create or (b) edit user action.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2014-5441 https://cve.radiocsirt.org/vuln/ghsa-wcfx-3m6v-4frg <p><strong>Affected:</strong> RubyGems: fat_free_crm</p> <p>Multiple cross-site scripting (XSS) vulnerabilities in `app/views/layouts/application.html.haml` in Fat Free CRM before 0.13.3 allow remote attackers to inject arbitrary web script or HTML via the (1) username, (2) first name, or (3) last name in a (a) create or (b) edit user action.</p> <p><strong>Affected:</strong> RubyGems: fat_free_crm</p> <p>Multiple cross-site scripting (XSS) vulnerabilities in `app/views/layouts/application.html.haml` in Fat Free CRM before 0.13.3 allow remote attackers to inject arbitrary web script or HTML via the (1) username, (2) first name, or (3) last name in a (a) create or (b) edit user action.</p> https://cve.radiocsirt.org/vuln/ghsa-wcfx-3m6v-4frg https://cve.radiocsirt.org/vuln/gsd-2014-5441 gsd-2014-5441 https://cve.radiocsirt.org/vuln/gsd-2014-5441