https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 10:59:13 +0000 https://cve.radiocsirt.org/vuln/cnvd-2018-01475 cnvd-2018-01475 https://cve.radiocsirt.org/vuln/cnvd-2018-01475 https://cve.radiocsirt.org/vuln/euvd-2026-78495 EUVD-2026-78495 https://cve.radiocsirt.org/vuln/euvd-2026-78495 https://cve.radiocsirt.org/vuln/fkie_cve-2017-15125 <p>A flaw was found in CloudForms before 5.9.0.22 in the self-service UI snapshot feature where the name field is not properly sanitized for HTML and JavaScript input. An attacker could use this flaw to execute a stored XSS attack on an application administrator using CloudForms. Please note that CSP (Content Security Policy) prevents exploitation of this XSS however not all browsers support CSP.</p> <p>A flaw was found in CloudForms before 5.9.0.22 in the self-service UI snapshot feature where the name field is not properly sanitized for HTML and JavaScript input. An attacker could use this flaw to execute a stored XSS attack on an application administrator using CloudForms. Please note that CSP (Content Security Policy) prevents exploitation of this XSS however not all browsers support CSP.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-15125 https://cve.radiocsirt.org/vuln/ghsa-8ghx-pqhq-656w <p>A flaw was found in CloudForms before 5.9.0.22 in the self-service UI snapshot feature where the name field is not properly sanitized for HTML and JavaScript input. An attacker could use this flaw to execute a stored XSS attack on an application administrator using CloudForms. Please note that CSP (Content Security Policy) prevents exploitation of this XSS however not all browsers support CSP.</p> <p>A flaw was found in CloudForms before 5.9.0.22 in the self-service UI snapshot feature where the name field is not properly sanitized for HTML and JavaScript input. An attacker could use this flaw to execute a stored XSS attack on an application administrator using CloudForms. Please note that CSP (Content Security Policy) prevents exploitation of this XSS however not all browsers support CSP.</p> https://cve.radiocsirt.org/vuln/ghsa-8ghx-pqhq-656w https://cve.radiocsirt.org/vuln/gsd-2017-15125 gsd-2017-15125 https://cve.radiocsirt.org/vuln/gsd-2017-15125 https://cve.radiocsirt.org/vuln/rhsa-2018:0380 <p>rubygem-i18n: cross-site scripting flaw in exception handling cloudforms: XSS in self-service UI snapshot feature</p> <p>rubygem-i18n: cross-site scripting flaw in exception handling cloudforms: XSS in self-service UI snapshot feature</p> https://cve.radiocsirt.org/vuln/rhsa-2018:0380