https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 19 Oct 2026 09:32:42 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-29230 EUVD-2026-29230 https://cve.radiocsirt.org/vuln/euvd-2026-29230 https://cve.radiocsirt.org/vuln/fkie_cve-2021-35488 <p>Thruk 2.40-2 allows /thruk/#cgi-bin/status.cgi?style=combined&amp;title={TITLE] Reflected XSS via the host or title parameter. An attacker could inject arbitrary JavaScript into status.cgi. The payload would be triggered every time an authenticated user browses the page containing it.</p> <p>Thruk 2.40-2 allows /thruk/#cgi-bin/status.cgi?style=combined&amp;title={TITLE] Reflected XSS via the host or title parameter. An attacker could inject arbitrary JavaScript into status.cgi. The payload would be triggered every time an authenticated user browses the page containing it.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-35488 https://cve.radiocsirt.org/vuln/ghsa-x3c7-xr54-mc7w <p>Thruk 2.40-2 allows /thruk/#cgi-bin/status.cgi?style=combined&amp;title={TITLE] Reflected XSS via the host or title parameter. An attacker could inject arbitrary JavaScript into status.cgi. The payload would be triggered every time an authenticated user browses the page containing it.</p> <p>Thruk 2.40-2 allows /thruk/#cgi-bin/status.cgi?style=combined&amp;title={TITLE] Reflected XSS via the host or title parameter. An attacker could inject arbitrary JavaScript into status.cgi. The payload would be triggered every time an authenticated user browses the page containing it.</p> https://cve.radiocsirt.org/vuln/ghsa-x3c7-xr54-mc7w https://cve.radiocsirt.org/vuln/gsd-2021-35488 gsd-2021-35488 https://cve.radiocsirt.org/vuln/gsd-2021-35488