Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 11:40:08 +0000 cnvd-2022-08389 https://cve.radiocsirt.org/vuln/cnvd-2022-08389 cnvd-2022-08389 https://cve.radiocsirt.org/vuln/cnvd-2022-08389 EUVD-2026-168513 https://cve.radiocsirt.org/vuln/euvd-2026-168513 EUVD-2026-168513 https://cve.radiocsirt.org/vuln/euvd-2026-168513 fkie_cve-2022-22117 https://cve.radiocsirt.org/vuln/fkie_cve-2022-22117 <p>In Directus, versions 9.0.0-alpha.4 through 9.4.1 allow unrestricted file upload of .html files in the media upload functionality, which leads to Cross-Site Scripting vulnerability. A low privileged attacker can upload a crafted HTML file as a profile avatar, and when an admin or another user opens it, the XSS payload gets triggered.</p> <p>In Directus, versions 9.0.0-alpha.4 through 9.4.1 allow unrestricted file upload of .html files in the media upload functionality, which leads to Cross-Site Scripting vulnerability. A low privileged attacker can upload a crafted HTML file as a profile avatar, and when an admin or another user opens it, the XSS payload gets triggered.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-22117 GHSA-vg7m-46jc-v5vw https://cve.radiocsirt.org/vuln/ghsa-vg7m-46jc-v5vw <p>In Directus, versions 9.0.0-alpha.4 through 9.4.1 allow unrestricted file upload of .html files in the media upload functionality, which leads to Cross-Site Scripting vulnerability. A low privileged attacker can upload a crafted HTML file as a profile avatar, and when an admin or another user opens it, the XSS payload gets triggered.</p> <p>In Directus, versions 9.0.0-alpha.4 through 9.4.1 allow unrestricted file upload of .html files in the media upload functionality, which leads to Cross-Site Scripting vulnerability. A low privileged attacker can upload a crafted HTML file as a profile avatar, and when an admin or another user opens it, the XSS payload gets triggered.</p> https://cve.radiocsirt.org/vuln/ghsa-vg7m-46jc-v5vw gsd-2022-22117 https://cve.radiocsirt.org/vuln/gsd-2022-22117 gsd-2022-22117 https://cve.radiocsirt.org/vuln/gsd-2022-22117