https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 10:21:40 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-11306 EUVD-2026-11306 https://cve.radiocsirt.org/vuln/euvd-2026-11306 https://cve.radiocsirt.org/vuln/fkie_cve-2022-0877 <p>Cross-site Scripting (XSS) - Stored in GitHub repository bookstackapp/bookstack prior to v22.02.3.</p> <p>Cross-site Scripting (XSS) - Stored in GitHub repository bookstackapp/bookstack prior to v22.02.3.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-0877 https://cve.radiocsirt.org/vuln/ghsa-5rcc-6cmj-7728 <p><strong>Affected:</strong> Packagist: ssddanbrown/bookstack</p> <p>Iframe tags don&#39;t have a sandbox attribute, this makes an attacker able to execute malicious javascript via an iframe and perform phishing attacks. The sandbox attribute will block script execution and prevents the content to navigate its top-level browsing context which will stop this type of attack.</p> <p><strong>Affected:</strong> Packagist: ssddanbrown/bookstack</p> <p>Iframe tags don&#39;t have a sandbox attribute, this makes an attacker able to execute malicious javascript via an iframe and perform phishing attacks. The sandbox attribute will block script execution and prevents the content to navigate its top-level browsing context which will stop this type of attack.</p> https://cve.radiocsirt.org/vuln/ghsa-5rcc-6cmj-7728 https://cve.radiocsirt.org/vuln/gsd-2022-0877 gsd-2022-0877 https://cve.radiocsirt.org/vuln/gsd-2022-0877