https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 01:18:32 +0000 https://cve.radiocsirt.org/vuln/cnvd-2023-00373 cnvd-2023-00373 https://cve.radiocsirt.org/vuln/cnvd-2023-00373 https://cve.radiocsirt.org/vuln/euvd-2026-30162 EUVD-2026-30162 https://cve.radiocsirt.org/vuln/euvd-2026-30162 https://cve.radiocsirt.org/vuln/fkie_cve-2021-38143 <p>An issue was discovered in Form Tools through 3.0.20. When an administrator creates a customer account, it is possible for the customer to log in and proceed with a change of name and last name. However, these fields are vulnerable to XSS payload insertion, being triggered in the admin panel when the admin tries to see the client list. This type of XSS (stored) can lead to the extraction of the PHPSESSID cookie belonging to the admin.</p> <p>An issue was discovered in Form Tools through 3.0.20. When an administrator creates a customer account, it is possible for the customer to log in and proceed with a change of name and last name. However, these fields are vulnerable to XSS payload insertion, being triggered in the admin panel when the admin tries to see the client list. This type of XSS (stored) can lead to the extraction of the PHPSESSID cookie belonging to the admin.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-38143 https://cve.radiocsirt.org/vuln/ghsa-7jr4-xg2j-23mp <p>An issue was discovered in Form Tools through 3.0.20. When an administrator creates a customer account, it is possible for the customer to log in and proceed with a change of name and last name. However, these fields are vulnerable to XSS payload insertion, being triggered in the admin panel when the admin tries to see the client list. This type of XSS (stored) can lead to the extraction of the PHPSESSID cookie belonging to the admin.</p> <p>An issue was discovered in Form Tools through 3.0.20. When an administrator creates a customer account, it is possible for the customer to log in and proceed with a change of name and last name. However, these fields are vulnerable to XSS payload insertion, being triggered in the admin panel when the admin tries to see the client list. This type of XSS (stored) can lead to the extraction of the PHPSESSID cookie belonging to the admin.</p> https://cve.radiocsirt.org/vuln/ghsa-7jr4-xg2j-23mp https://cve.radiocsirt.org/vuln/gsd-2021-38143 gsd-2021-38143 https://cve.radiocsirt.org/vuln/gsd-2021-38143