Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 27 Oct 2026 16:22:12 +0000 cnvd-2020-22367 https://cve.radiocsirt.org/vuln/cnvd-2020-22367 cnvd-2020-22367 https://cve.radiocsirt.org/vuln/cnvd-2020-22367 EUVD-2026-56292 https://cve.radiocsirt.org/vuln/euvd-2026-56292 EUVD-2026-56292 https://cve.radiocsirt.org/vuln/euvd-2026-56292 fkie_cve-2019-14315 https://cve.radiocsirt.org/vuln/fkie_cve-2019-14315 <p>A cross-site scripting (XSS) vulnerability in upload.php in SunHater KCFinder 3.20-test1, 3.20-test2, 3.12, and earlier allows remote attackers to inject arbitrary web script or HTML via the CKEditorFuncNum parameter.</p> <p>A cross-site scripting (XSS) vulnerability in upload.php in SunHater KCFinder 3.20-test1, 3.20-test2, 3.12, and earlier allows remote attackers to inject arbitrary web script or HTML via the CKEditorFuncNum parameter.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-14315 GHSA-vwh5-78jc-hpjx — SunHater KCFinder cross-site scripting (XSS) vulnerability in upload.php https://cve.radiocsirt.org/vuln/ghsa-vwh5-78jc-hpjx <p><strong>Affected:</strong> Packagist: sunhater/kcfinder</p> <p>A cross-site scripting (XSS) vulnerability in upload.php in SunHater KCFinder 3.20-test1, 3.20-test2, 3.12, and earlier allows remote attackers to inject arbitrary web script or HTML via the CKEditorFuncNum parameter.</p> <p><strong>Affected:</strong> Packagist: sunhater/kcfinder</p> <p>A cross-site scripting (XSS) vulnerability in upload.php in SunHater KCFinder 3.20-test1, 3.20-test2, 3.12, and earlier allows remote attackers to inject arbitrary web script or HTML via the CKEditorFuncNum parameter.</p> https://cve.radiocsirt.org/vuln/ghsa-vwh5-78jc-hpjx gsd-2019-14315 https://cve.radiocsirt.org/vuln/gsd-2019-14315 gsd-2019-14315 https://cve.radiocsirt.org/vuln/gsd-2019-14315