https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 17:06:28 +0000 https://cve.radiocsirt.org/vuln/cnvd-2022-08390 cnvd-2022-08390 https://cve.radiocsirt.org/vuln/cnvd-2022-08390 https://cve.radiocsirt.org/vuln/euvd-2026-170162 EUVD-2026-170162 https://cve.radiocsirt.org/vuln/euvd-2026-170162 https://cve.radiocsirt.org/vuln/fkie_cve-2022-22114 <p>In Teedy, versions v1.5 through v1.9 are vulnerable to Reflected Cross-Site Scripting (XSS). The “search term&#34; search functionality is not sufficiently sanitized while displaying the results of the search, which can be leveraged to inject arbitrary scripts. These scripts are executed in a victim’s browser when they enter the crafted URL. In the worst case, the victim who inadvertently triggers the attack is a highly privileged administrator. The injected scripts can extract the Session ID, which can lead to full Account Takeover of the administrator, by an unauthenticated attacker.</p> <p>In Teedy, versions v1.5 through v1.9 are vulnerable to Reflected Cross-Site Scripting (XSS). The “search term&#34; search functionality is not sufficiently sanitized while displaying the results of the search, which can be leveraged to inject arbitrary scripts. These scripts are executed in a victim’s browser when they enter the crafted URL. In the worst case, the victim who inadvertently triggers the attack is a highly privileged administrator. The injected scripts can extract the Session ID, which can lead to full Account Takeover of the administrator, by an unauthenticated attacker.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-22114 https://cve.radiocsirt.org/vuln/ghsa-3228-87fw-vwj8 <p>In Teedy, versions v1.5 through v1.9 are vulnerable to Reflected Cross-Site Scripting (XSS). The “search term&#34; search functionality is not sufficiently sanitized while displaying the results of the search, which can be leveraged to inject arbitrary scripts. These scripts are executed in a victim’s browser when they enter the crafted URL. In the worst case, the victim who inadvertently triggers the attack is a highly privileged administrator. The injected scripts can extract the Session ID, which can lead to full Account Takeover of the administrator, by an unauthenticated attacker.</p> <p>In Teedy, versions v1.5 through v1.9 are vulnerable to Reflected Cross-Site Scripting (XSS). The “search term&#34; search functionality is not sufficiently sanitized while displaying the results of the search, which can be leveraged to inject arbitrary scripts. These scripts are executed in a victim’s browser when they enter the crafted URL. In the worst case, the victim who inadvertently triggers the attack is a highly privileged administrator. The injected scripts can extract the Session ID, which can lead to full Account Takeover of the administrator, by an unauthenticated attacker.</p> https://cve.radiocsirt.org/vuln/ghsa-3228-87fw-vwj8 https://cve.radiocsirt.org/vuln/gsd-2022-22114 gsd-2022-22114 https://cve.radiocsirt.org/vuln/gsd-2022-22114