Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 05:08:33 +0000 cnvd-2021-95582 https://cve.radiocsirt.org/vuln/cnvd-2021-95582 cnvd-2021-95582 https://cve.radiocsirt.org/vuln/cnvd-2021-95582 EUVD-2026-32072 https://cve.radiocsirt.org/vuln/euvd-2026-32072 EUVD-2026-32072 https://cve.radiocsirt.org/vuln/euvd-2026-32072 fkie_cve-2021-42119 https://cve.radiocsirt.org/vuln/fkie_cve-2021-42119 <p>Persistent Cross Site Scripting in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version &lt;= 7.1.27 via the Search Functionality allows authenticated users with Object Modification privileges to inject arbitrary HTML and JavaScript in object attributes, which is then rendered in the Search Functionality, to alter the intended functionality and steal cookies, the latter allowing for account takeover.</p> <p>Persistent Cross Site Scripting in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version &lt;= 7.1.27 via the Search Functionality allows authenticated users with Object Modification privileges to inject arbitrary HTML and JavaScript in object attributes, which is then rendered in the Search Functionality, to alter the intended functionality and steal cookies, the latter allowing for account takeover.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-42119 GHSA-3hxq-v55q-xvxq https://cve.radiocsirt.org/vuln/ghsa-3hxq-v55q-xvxq <p>Persistent Cross Site Scripting in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version &lt;= 7.1.27 via the Search Functionality allows authenticated users with Object Modification privileges to inject arbitrary HTML and JavaScript in object attributes, which is then rendered in the Search Functionality, to alter the intended functionality and steal cookies, the latter allowing for account takeover.</p> <p>Persistent Cross Site Scripting in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version &lt;= 7.1.27 via the Search Functionality allows authenticated users with Object Modification privileges to inject arbitrary HTML and JavaScript in object attributes, which is then rendered in the Search Functionality, to alter the intended functionality and steal cookies, the latter allowing for account takeover.</p> https://cve.radiocsirt.org/vuln/ghsa-3hxq-v55q-xvxq gsd-2021-42119 https://cve.radiocsirt.org/vuln/gsd-2021-42119 gsd-2021-42119 https://cve.radiocsirt.org/vuln/gsd-2021-42119