Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 09:56:31 +0000 cnvd-2021-100293 https://cve.radiocsirt.org/vuln/cnvd-2021-100293 cnvd-2021-100293 https://cve.radiocsirt.org/vuln/cnvd-2021-100293 EUVD-2026-29475 https://cve.radiocsirt.org/vuln/euvd-2026-29475 EUVD-2026-29475 https://cve.radiocsirt.org/vuln/euvd-2026-29475 fkie_cve-2021-36760 https://cve.radiocsirt.org/vuln/fkie_cve-2021-36760 <p>In accountrecoveryendpoint/recoverpassword.do in WSO2 Identity Server 5.7.0, it is possible to perform a DOM-Based XSS attack affecting the callback parameter modifying the URL that precedes the callback parameter. Once the username or password reset procedure is completed, the JavaScript code will be executed. (recoverpassword.do also has an open redirect issue for a similar reason.)</p> <p>In accountrecoveryendpoint/recoverpassword.do in WSO2 Identity Server 5.7.0, it is possible to perform a DOM-Based XSS attack affecting the callback parameter modifying the URL that precedes the callback parameter. Once the username or password reset procedure is completed, the JavaScript code will be executed. (recoverpassword.do also has an open redirect issue for a similar reason.)</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-36760 GHSA-pgw2-c4q3-g5cf https://cve.radiocsirt.org/vuln/ghsa-pgw2-c4q3-g5cf <p>In accountrecoveryendpoint/recoverpassword.do in WSO2 Identity Server 5.7.0, it is possible to perform a DOM-Based XSS attack affecting the callback parameter modifying the URL that precedes the callback parameter. Once the username or password reset procedure is completed, the JavaScript code will be executed. (recoverpassword.do also has an open redirect issue for a similar reason.)</p> <p>In accountrecoveryendpoint/recoverpassword.do in WSO2 Identity Server 5.7.0, it is possible to perform a DOM-Based XSS attack affecting the callback parameter modifying the URL that precedes the callback parameter. Once the username or password reset procedure is completed, the JavaScript code will be executed. (recoverpassword.do also has an open redirect issue for a similar reason.)</p> https://cve.radiocsirt.org/vuln/ghsa-pgw2-c4q3-g5cf gsd-2021-36760 https://cve.radiocsirt.org/vuln/gsd-2021-36760 gsd-2021-36760 https://cve.radiocsirt.org/vuln/gsd-2021-36760