https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 26 Oct 2026 06:28:18 +0000 https://cve.radiocsirt.org/vuln/bdu:2020-05659 bdu:2020-05659 https://cve.radiocsirt.org/vuln/bdu:2020-05659 https://cve.radiocsirt.org/vuln/cnvd-2020-51765 cnvd-2020-51765 https://cve.radiocsirt.org/vuln/cnvd-2020-51765 https://cve.radiocsirt.org/vuln/euvd-2026-167923 EUVD-2026-167923 https://cve.radiocsirt.org/vuln/euvd-2026-167923 https://cve.radiocsirt.org/vuln/fkie_cve-2020-9743 <p>AEM versions 6.5.5.0 (and below), 6.4.8.1 (and below), 6.3.3.8 (and below) and 6.2 SP1-CFP20 (and below) are affected by an HTML injection vulnerability in the content editor component that allows unauthenticated users to craft an HTTP request that includes arbitrary HTML code in a parameter value. An attacker could then use the malicious GET request to lure victims to perform unsafe actions in the page (ex. phishing).</p> <p>AEM versions 6.5.5.0 (and below), 6.4.8.1 (and below), 6.3.3.8 (and below) and 6.2 SP1-CFP20 (and below) are affected by an HTML injection vulnerability in the content editor component that allows unauthenticated users to craft an HTTP request that includes arbitrary HTML code in a parameter value. An attacker could then use the malicious GET request to lure victims to perform unsafe actions in the page (ex. phishing).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-9743 https://cve.radiocsirt.org/vuln/ghsa-h5m3-8vhj-cgjg <p>AEM versions 6.5.5.0 (and below), 6.4.8.1 (and below), 6.3.3.8 (and below) and 6.2 SP1-CFP20 (and below) are affected by an HTML injection vulnerability in the content editor component that allows unauthenticated users to craft an HTTP request that includes arbitrary HTML code in a parameter value. An attacker could then use the malicious GET request to lure victims to perform unsafe actions in the page (ex. phishing).</p> <p>AEM versions 6.5.5.0 (and below), 6.4.8.1 (and below), 6.3.3.8 (and below) and 6.2 SP1-CFP20 (and below) are affected by an HTML injection vulnerability in the content editor component that allows unauthenticated users to craft an HTTP request that includes arbitrary HTML code in a parameter value. An attacker could then use the malicious GET request to lure victims to perform unsafe actions in the page (ex. phishing).</p> https://cve.radiocsirt.org/vuln/ghsa-h5m3-8vhj-cgjg https://cve.radiocsirt.org/vuln/gsd-2020-9743 gsd-2020-9743 https://cve.radiocsirt.org/vuln/gsd-2020-9743