https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 01:17:43 +0000 https://cve.radiocsirt.org/vuln/cnvd-2022-08205 cnvd-2022-08205 https://cve.radiocsirt.org/vuln/cnvd-2022-08205 https://cve.radiocsirt.org/vuln/euvd-2026-182423 EUVD-2026-182423 https://cve.radiocsirt.org/vuln/euvd-2026-182423 https://cve.radiocsirt.org/vuln/fkie_cve-2022-22124 <p>In Halo, versions v1.0.0 to v1.4.17 (latest) are vulnerable to Stored Cross-Site Scripting (XSS) in the profile image. An authenticated attacker can upload a carefully crafted SVG file that will trigger arbitrary javascript to run on a victim’s browser.</p> <p>In Halo, versions v1.0.0 to v1.4.17 (latest) are vulnerable to Stored Cross-Site Scripting (XSS) in the profile image. An authenticated attacker can upload a carefully crafted SVG file that will trigger arbitrary javascript to run on a victim’s browser.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-22124 https://cve.radiocsirt.org/vuln/ghsa-g7vj-x88g-9f9w <p>In Halo, versions v1.0.0 to v1.4.17 (latest) are vulnerable to Stored Cross-Site Scripting (XSS) in the profile image. An authenticated attacker can upload a carefully crafted SVG file that will trigger arbitrary javascript to run on a victim’s browser.</p> <p>In Halo, versions v1.0.0 to v1.4.17 (latest) are vulnerable to Stored Cross-Site Scripting (XSS) in the profile image. An authenticated attacker can upload a carefully crafted SVG file that will trigger arbitrary javascript to run on a victim’s browser.</p> https://cve.radiocsirt.org/vuln/ghsa-g7vj-x88g-9f9w https://cve.radiocsirt.org/vuln/gsd-2022-22124 gsd-2022-22124 https://cve.radiocsirt.org/vuln/gsd-2022-22124