https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 06:58:46 +0000 https://cve.radiocsirt.org/vuln/cnvd-2019-26880 cnvd-2019-26880 https://cve.radiocsirt.org/vuln/cnvd-2019-26880 https://cve.radiocsirt.org/vuln/euvd-2026-56599 EUVD-2026-56599 https://cve.radiocsirt.org/vuln/euvd-2026-56599 https://cve.radiocsirt.org/vuln/fkie_cve-2019-14769 <p>Backdrop CMS 1.12.x before 1.12.8 and 1.13.x before 1.13.3 doesn&#39;t sufficiently filter output when displaying certain block labels created by administrators. An attacker could potentially craft a specialized label, then have an administrator execute scripting when administering a layout. (This issue is mitigated by the attacker needing permission to create custom blocks on the site, which is typically an administrative permission.)</p> <p>Backdrop CMS 1.12.x before 1.12.8 and 1.13.x before 1.13.3 doesn&#39;t sufficiently filter output when displaying certain block labels created by administrators. An attacker could potentially craft a specialized label, then have an administrator execute scripting when administering a layout. (This issue is mitigated by the attacker needing permission to create custom blocks on the site, which is typically an administrative permission.)</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-14769 https://cve.radiocsirt.org/vuln/ghsa-48qf-j39f-v99r <p>Backdrop CMS 1.12.x before 1.12.8 and 1.13.x before 1.13.3 doesn&#39;t sufficiently filter output when displaying certain block labels created by administrators. An attacker could potentially craft a specialized label, then have an administrator execute scripting when administering a layout. (This issue is mitigated by the attacker needing permission to create custom blocks on the site, which is typically an administrative permission.)</p> <p>Backdrop CMS 1.12.x before 1.12.8 and 1.13.x before 1.13.3 doesn&#39;t sufficiently filter output when displaying certain block labels created by administrators. An attacker could potentially craft a specialized label, then have an administrator execute scripting when administering a layout. (This issue is mitigated by the attacker needing permission to create custom blocks on the site, which is typically an administrative permission.)</p> https://cve.radiocsirt.org/vuln/ghsa-48qf-j39f-v99r https://cve.radiocsirt.org/vuln/gsd-2019-14769 gsd-2019-14769 https://cve.radiocsirt.org/vuln/gsd-2019-14769