Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 11:30:09 +0000 cnvd-2018-19873 https://cve.radiocsirt.org/vuln/cnvd-2018-19873 cnvd-2018-19873 https://cve.radiocsirt.org/vuln/cnvd-2018-19873 EUVD-2026-64266 https://cve.radiocsirt.org/vuln/euvd-2026-64266 EUVD-2026-64266 https://cve.radiocsirt.org/vuln/euvd-2026-64266 fkie_cve-2018-9282 https://cve.radiocsirt.org/vuln/fkie_cve-2018-9282 <p>An XSS issue was discovered in Subsonic Media Server 6.1.1. The podcast subscription form is affected by a stored XSS vulnerability in the add parameter to podcastReceiverAdmin.view; no administrator access is required. By injecting a JavaScript payload, this flaw could be used to manipulate a user&#39;s session, or elevate privileges by targeting an administrative user.</p> <p>An XSS issue was discovered in Subsonic Media Server 6.1.1. The podcast subscription form is affected by a stored XSS vulnerability in the add parameter to podcastReceiverAdmin.view; no administrator access is required. By injecting a JavaScript payload, this flaw could be used to manipulate a user&#39;s session, or elevate privileges by targeting an administrative user.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-9282 GHSA-7qc8-2qm6-x6x6 https://cve.radiocsirt.org/vuln/ghsa-7qc8-2qm6-x6x6 <p>An XSS issue was discovered in Subsonic Media Server 6.1.1. The podcast subscription form is affected by a stored XSS vulnerability in the add parameter to podcastReceiverAdmin.view; no administrator access is required. By injecting a JavaScript payload, this flaw could be used to manipulate a user&#39;s session, or elevate privileges by targeting an administrative user.</p> <p>An XSS issue was discovered in Subsonic Media Server 6.1.1. The podcast subscription form is affected by a stored XSS vulnerability in the add parameter to podcastReceiverAdmin.view; no administrator access is required. By injecting a JavaScript payload, this flaw could be used to manipulate a user&#39;s session, or elevate privileges by targeting an administrative user.</p> https://cve.radiocsirt.org/vuln/ghsa-7qc8-2qm6-x6x6 gsd-2018-9282 https://cve.radiocsirt.org/vuln/gsd-2018-9282 gsd-2018-9282 https://cve.radiocsirt.org/vuln/gsd-2018-9282