https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 20:18:51 +0000 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0051 certfr-2023-avi-0051 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0051 https://cve.radiocsirt.org/vuln/cnvd-2018-13038 cnvd-2018-13038 https://cve.radiocsirt.org/vuln/cnvd-2018-13038 https://cve.radiocsirt.org/vuln/euvd-2026-63529 EUVD-2026-63529 https://cve.radiocsirt.org/vuln/euvd-2026-63529 https://cve.radiocsirt.org/vuln/fkie_cve-2018-8046 <p>The getTip() method of Action Columns of Sencha Ext JS 4 to 6 before 6.6.0 is vulnerable to XSS attacks, even when passed HTML-escaped data. This framework brings no built-in XSS protection, so the developer has to ensure that data is correctly sanitized. However, the getTip() method of Action Columns takes HTML-escaped data and un-escapes it. If the tooltip contains user-controlled data, an attacker could exploit this to create a cross-site scripting attack, even when developers took precautions and escaped data.</p> <p>The getTip() method of Action Columns of Sencha Ext JS 4 to 6 before 6.6.0 is vulnerable to XSS attacks, even when passed HTML-escaped data. This framework brings no built-in XSS protection, so the developer has to ensure that data is correctly sanitized. However, the getTip() method of Action Columns takes HTML-escaped data and un-escapes it. If the tooltip contains user-controlled data, an attacker could exploit this to create a cross-site scripting attack, even when developers took precautions and escaped data.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-8046 https://cve.radiocsirt.org/vuln/ghsa-wjgq-2g8m-w698 <p>The getTip() method of Action Columns of Sencha Ext JS 4 to 6 before 6.6.0 is vulnerable to XSS attacks, even when passed HTML-escaped data. This framework brings no built-in XSS protection, so the developer has to ensure that data is correctly sanitized. However, the getTip() method of Action Columns takes HTML-escaped data and un-escapes it. If the tooltip contains user-controlled data, an attacker could exploit this to create a cross-site scripting attack, even when developers took precautions and escaped data.</p> <p>The getTip() method of Action Columns of Sencha Ext JS 4 to 6 before 6.6.0 is vulnerable to XSS attacks, even when passed HTML-escaped data. This framework brings no built-in XSS protection, so the developer has to ensure that data is correctly sanitized. However, the getTip() method of Action Columns takes HTML-escaped data and un-escapes it. If the tooltip contains user-controlled data, an attacker could exploit this to create a cross-site scripting attack, even when developers took precautions and escaped data.</p> https://cve.radiocsirt.org/vuln/ghsa-wjgq-2g8m-w698 https://cve.radiocsirt.org/vuln/gsd-2018-8046 gsd-2018-8046 https://cve.radiocsirt.org/vuln/gsd-2018-8046