https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 13 Oct 2026 03:32:28 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-29377 EUVD-2026-29377 https://cve.radiocsirt.org/vuln/euvd-2026-29377 https://cve.radiocsirt.org/vuln/fkie_cve-2021-36454 <p>Cross Site Scripting (XSS) vulnerability in Naviwebs Navigate Cms 2.9 via the navigate-quickse parameter to 1) backups\backups.php, 2) blocks\blocks.php, 3) brands\brands.php, 4) comments\comments.php, 5) coupons\coupons.php, 6) feeds\feeds.php, 7) functions\functions.php, 8) items\items.php, 9) menus\menus.php, 10) orders\orders.php, 11) payment_methods\payment_methods.php, 12) products\products.php, 13) profiles\profiles.php, 14) shipping_methods\shipping_methods.php, 15) templates\templates.php, 16) users\users.php, 17) webdictionary\webdictionary.php, 18) websites\websites.php, and 19) webusers\webusers.php because the initial_url function is built in these files.</p> <p>Cross Site Scripting (XSS) vulnerability in Naviwebs Navigate Cms 2.9 via the navigate-quickse parameter to 1) backups\backups.php, 2) blocks\blocks.php, 3) brands\brands.php, 4) comments\comments.php, 5) coupons\coupons.php, 6) feeds\feeds.php, 7) functions\functions.php, 8) items\items.php, 9) menus\menus.php, 10) orders\orders.php, 11) payment_methods\payment_methods.php, 12) products\products.php, 13) profiles\profiles.php, 14) shipping_methods\shipping_methods.php, 15) templates\templates.php, 16) users\users.php, 17) webdictionary\webdictionary.php, 18) websites\websites.php, and 19) webusers\webusers.php because the initial_url function is built in these files.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-36454 https://cve.radiocsirt.org/vuln/ghsa-gh7r-jpw7-q393 <p>Cross Site Scripting (XSS) vulnerability in Naviwebs Navigate Cms 2.9 via the navigate-quickse parameter to 1) backups\backups.php, 2) blocks\blocks.php, 3) brands\brands.php, 4) comments\comments.php, 5) coupons\coupons.php, 6) feeds\feeds.php, 7) functions\functions.php, 8) items\items.php, 9) menus\menus.php, 10) orders\orders.php, 11) payment_methods\payment_methods.php, 12) products\products.php, 13) profiles\profiles.php, 14) shipping_methods\shipping_methods.php, 15) templates\templates.php, 16) users\users.php, 17) webdictionary\webdictionary.php, 18) websites\websites.php, and 19) webusers\webusers.php because the initial_url function is built in these files.</p> <p>Cross Site Scripting (XSS) vulnerability in Naviwebs Navigate Cms 2.9 via the navigate-quickse parameter to 1) backups\backups.php, 2) blocks\blocks.php, 3) brands\brands.php, 4) comments\comments.php, 5) coupons\coupons.php, 6) feeds\feeds.php, 7) functions\functions.php, 8) items\items.php, 9) menus\menus.php, 10) orders\orders.php, 11) payment_methods\payment_methods.php, 12) products\products.php, 13) profiles\profiles.php, 14) shipping_methods\shipping_methods.php, 15) templates\templates.php, 16) users\users.php, 17) webdictionary\webdictionary.php, 18) websites\websites.php, and 19) webusers\webusers.php because the initial_url function is built in these files.</p> https://cve.radiocsirt.org/vuln/ghsa-gh7r-jpw7-q393 https://cve.radiocsirt.org/vuln/gsd-2021-36454 gsd-2021-36454 https://cve.radiocsirt.org/vuln/gsd-2021-36454 https://cve.radiocsirt.org/vuln/jvndb-2021-002282 <p>Navigate CMS is an open source Contents Management System (CMS) provided by Naviwebs S.C. Navigate CMS contains multiple vulnerabilities listed below. * Reflected cross-site scripting in the Help feature (CWE-79) * Reflected cross-site scripting (CWE-79) - CVE-2021-36454 * SQL injection (CWE-89) - CVE-2021-36455 Duong Xuan Hiep (Hydrasky) of VNCERT/CC reported these vulnerabilities to the developer and coordinated on his own. After coordination was completed, this case was reported to JPCERT/CC in order to notify users of the solutions via JVN.</p> <p>Navigate CMS is an open source Contents Management System (CMS) provided by Naviwebs S.C. Navigate CMS contains multiple vulnerabilities listed below. * Reflected cross-site scripting in the Help feature (CWE-79) * Reflected cross-site scripting (CWE-79) - CVE-2021-36454 * SQL injection (CWE-89) - CVE-2021-36455 Duong Xuan Hiep (Hydrasky) of VNCERT/CC reported these vulnerabilities to the developer and coordinated on his own. After coordination was completed, this case was reported to JPCERT/CC in order to notify users of the solutions via JVN.</p> https://cve.radiocsirt.org/vuln/jvndb-2021-002282