Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 02:42:13 +0000 cnvd-2019-43370 https://cve.radiocsirt.org/vuln/cnvd-2019-43370 cnvd-2019-43370 https://cve.radiocsirt.org/vuln/cnvd-2019-43370 EUVD-2026-58128 https://cve.radiocsirt.org/vuln/euvd-2026-58128 EUVD-2026-58128 https://cve.radiocsirt.org/vuln/euvd-2026-58128 fkie_cve-2019-17120 https://cve.radiocsirt.org/vuln/fkie_cve-2019-17120 <p>A stored and reflected cross-site scripting (XSS) vulnerability in WiKID 2FA Enterprise Server through 4.2.0-b2047 allow remote attackers to inject arbitrary web script or HTML via /WiKIDAdmin/adm_usrs.jsp. The usr parameter is vulnerable: the reflected cross-site scripting occurs immediately after the user is created. The malicious script is stored and will be executed whenever /WiKIDAdmin/adm_usrs.jsp is visited.</p> <p>A stored and reflected cross-site scripting (XSS) vulnerability in WiKID 2FA Enterprise Server through 4.2.0-b2047 allow remote attackers to inject arbitrary web script or HTML via /WiKIDAdmin/adm_usrs.jsp. The usr parameter is vulnerable: the reflected cross-site scripting occurs immediately after the user is created. The malicious script is stored and will be executed whenever /WiKIDAdmin/adm_usrs.jsp is visited.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-17120 GHSA-c8f6-jm2m-h3gm https://cve.radiocsirt.org/vuln/ghsa-c8f6-jm2m-h3gm <p>A stored and reflected cross-site scripting (XSS) vulnerability in WiKID 2FA Enterprise Server through 4.2.0-b2047 allow remote attackers to inject arbitrary web script or HTML via /WiKIDAdmin/adm_usrs.jsp. The usr parameter is vulnerable: the reflected cross-site scripting occurs immediately after the user is created. The malicious script is stored and will be executed whenever /WiKIDAdmin/adm_usrs.jsp is visited.</p> <p>A stored and reflected cross-site scripting (XSS) vulnerability in WiKID 2FA Enterprise Server through 4.2.0-b2047 allow remote attackers to inject arbitrary web script or HTML via /WiKIDAdmin/adm_usrs.jsp. The usr parameter is vulnerable: the reflected cross-site scripting occurs immediately after the user is created. The malicious script is stored and will be executed whenever /WiKIDAdmin/adm_usrs.jsp is visited.</p> https://cve.radiocsirt.org/vuln/ghsa-c8f6-jm2m-h3gm gsd-2019-17120 https://cve.radiocsirt.org/vuln/gsd-2019-17120 gsd-2019-17120 https://cve.radiocsirt.org/vuln/gsd-2019-17120