Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 03:46:53 +0000 cnvd-2021-34501 https://cve.radiocsirt.org/vuln/cnvd-2021-34501 cnvd-2021-34501 https://cve.radiocsirt.org/vuln/cnvd-2021-34501 EUVD-2026-44800 https://cve.radiocsirt.org/vuln/euvd-2026-44800 EUVD-2026-44800 https://cve.radiocsirt.org/vuln/euvd-2026-44800 fkie_cve-2020-23376 https://cve.radiocsirt.org/vuln/fkie_cve-2020-23376 <p>NoneCMS v1.3 has a CSRF vulnerability in public/index.php/admin/nav/add.html, as demonstrated by adding a navigation column which can be injected with arbitrary web script or HTML via the name parameter to launch a stored XSS attack.</p> <p>NoneCMS v1.3 has a CSRF vulnerability in public/index.php/admin/nav/add.html, as demonstrated by adding a navigation column which can be injected with arbitrary web script or HTML via the name parameter to launch a stored XSS attack.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-23376 GHSA-gpxj-cjjv-pphf https://cve.radiocsirt.org/vuln/ghsa-gpxj-cjjv-pphf <p>NoneCMS v1.3 has a CSRF vulnerability in public/index.php/admin/nav/add.html, as demonstrated by adding a navigation column which can be injected with arbitrary web script or HTML via the name parameter to launch a stored XSS attack.</p> <p>NoneCMS v1.3 has a CSRF vulnerability in public/index.php/admin/nav/add.html, as demonstrated by adding a navigation column which can be injected with arbitrary web script or HTML via the name parameter to launch a stored XSS attack.</p> https://cve.radiocsirt.org/vuln/ghsa-gpxj-cjjv-pphf gsd-2020-23376 https://cve.radiocsirt.org/vuln/gsd-2020-23376 gsd-2020-23376 https://cve.radiocsirt.org/vuln/gsd-2020-23376