https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 20:46:55 +0000 https://cve.radiocsirt.org/vuln/cnvd-2018-12752 cnvd-2018-12752 https://cve.radiocsirt.org/vuln/cnvd-2018-12752 https://cve.radiocsirt.org/vuln/euvd-2026-61334 EUVD-2026-61334 https://cve.radiocsirt.org/vuln/euvd-2026-61334 https://cve.radiocsirt.org/vuln/fkie_cve-2018-3763 <p>In Nextcloud Calendar before 1.5.8 and 1.6.1, a missing sanitization of search results for an autocomplete field could lead to a stored XSS requiring user-interaction. The missing sanitization only affected group names, hence malicious search results could only be crafted by privileged users like admins or group admins.</p> <p>In Nextcloud Calendar before 1.5.8 and 1.6.1, a missing sanitization of search results for an autocomplete field could lead to a stored XSS requiring user-interaction. The missing sanitization only affected group names, hence malicious search results could only be crafted by privileged users like admins or group admins.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-3763 https://cve.radiocsirt.org/vuln/ghsa-5pqm-hfmj-g8jg <p>In Nextcloud Calendar before 1.5.8 and 1.6.1, a missing sanitization of search results for an autocomplete field could lead to a stored XSS requiring user-interaction. The missing sanitization only affected group names, hence malicious search results could only be crafted by privileged users like admins or group admins.</p> <p>In Nextcloud Calendar before 1.5.8 and 1.6.1, a missing sanitization of search results for an autocomplete field could lead to a stored XSS requiring user-interaction. The missing sanitization only affected group names, hence malicious search results could only be crafted by privileged users like admins or group admins.</p> https://cve.radiocsirt.org/vuln/ghsa-5pqm-hfmj-g8jg https://cve.radiocsirt.org/vuln/gsd-2018-3763 gsd-2018-3763 https://cve.radiocsirt.org/vuln/gsd-2018-3763