Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 23:18:43 +0000 EUVD-2026-16417 https://cve.radiocsirt.org/vuln/euvd-2026-16417 EUVD-2026-16417 https://cve.radiocsirt.org/vuln/euvd-2026-16417 fkie_cve-2022-30110 https://cve.radiocsirt.org/vuln/fkie_cve-2022-30110 <p>The file preview functionality in Jirafeau &lt; 4.4.0, which is enabled by default, could be exploited for cross site scripting. An attacker could upload image/svg+xml files containing JavaScript. When someone visits the File Preview URL for this file, the JavaScript inside of this image/svg+xml file will be executed in the users&#39; browser.</p> <p>The file preview functionality in Jirafeau &lt; 4.4.0, which is enabled by default, could be exploited for cross site scripting. An attacker could upload image/svg+xml files containing JavaScript. When someone visits the File Preview URL for this file, the JavaScript inside of this image/svg+xml file will be executed in the users&#39; browser.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-30110 GHSA-j2xf-p274-g8cc — Cross-site Scripting in Jirafeau https://cve.radiocsirt.org/vuln/ghsa-j2xf-p274-g8cc <p><strong>Affected:</strong> Packagist: mojo42/jirafeau</p> <p>The file preview functionality in Jirafeau &lt; 4.4.0, which is enabled by default, could be exploited for cross site scripting. An attacker could upload image/svg+xml files containing JavaScript. When someone visits the File Preview URL for this file, the JavaScript inside of this image/svg+xml file will be executed in the users&#39; browser.</p> <p><strong>Affected:</strong> Packagist: mojo42/jirafeau</p> <p>The file preview functionality in Jirafeau &lt; 4.4.0, which is enabled by default, could be exploited for cross site scripting. An attacker could upload image/svg+xml files containing JavaScript. When someone visits the File Preview URL for this file, the JavaScript inside of this image/svg+xml file will be executed in the users&#39; browser.</p> https://cve.radiocsirt.org/vuln/ghsa-j2xf-p274-g8cc gsd-2022-30110 https://cve.radiocsirt.org/vuln/gsd-2022-30110 gsd-2022-30110 https://cve.radiocsirt.org/vuln/gsd-2022-30110