https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 20:37:47 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-230356 EUVD-2026-230356 https://cve.radiocsirt.org/vuln/euvd-2026-230356 https://cve.radiocsirt.org/vuln/fkie_cve-2022-23543 <p>Silverware Games is a social network where people can play games online. Users can attach URLs to YouTube videos, the site will generate related `&lt;iframe&gt;` when the post will be published. The handler has some sort of protection so non-YouTube links can&#39;t be posted, as well as HTML tags are being stripped. However, it was still possible to add custom HTML attributes (e.g. `onclick=alert(&#34;xss&#34;)`) to the `&lt;iframe&gt;&#39;. This issue was fixed in the version `1.1.34` and does not require any extra actions from our members. There has been no evidence that this vulnerability was used by anyone at this time.</p> <p>Silverware Games is a social network where people can play games online. Users can attach URLs to YouTube videos, the site will generate related `&lt;iframe&gt;` when the post will be published. The handler has some sort of protection so non-YouTube links can&#39;t be posted, as well as HTML tags are being stripped. However, it was still possible to add custom HTML attributes (e.g. `onclick=alert(&#34;xss&#34;)`) to the `&lt;iframe&gt;&#39;. This issue was fixed in the version `1.1.34` and does not require any extra actions from our members. There has been no evidence that this vulnerability was used by anyone at this time.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-23543 https://cve.radiocsirt.org/vuln/gsd-2022-23543 gsd-2022-23543 https://cve.radiocsirt.org/vuln/gsd-2022-23543