https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 20:42:34 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-159022 EUVD-2026-159022 https://cve.radiocsirt.org/vuln/euvd-2026-159022 https://cve.radiocsirt.org/vuln/fkie_cve-2022-45176 <p>An issue was discovered in LIVEBOX Collaboration vDesk through v018. Stored Cross-site Scripting (XSS) can occur under the /api/v1/getbodyfile endpoint via the uri parameter. The web application (through its vShare functionality section) doesn&#39;t properly check parameters, sent in HTTP requests as input, before saving them on the server. In addition, crafted JavaScript content can then be reflected back to the end user and executed by the web browser.</p> <p>An issue was discovered in LIVEBOX Collaboration vDesk through v018. Stored Cross-site Scripting (XSS) can occur under the /api/v1/getbodyfile endpoint via the uri parameter. The web application (through its vShare functionality section) doesn&#39;t properly check parameters, sent in HTTP requests as input, before saving them on the server. In addition, crafted JavaScript content can then be reflected back to the end user and executed by the web browser.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-45176 https://cve.radiocsirt.org/vuln/ghsa-ccrh-57hj-rh5r <p>An issue was discovered in LIVEBOX Collaboration vDesk through v018. Stored Cross-site Scripting (XSS) can occur under the /api/v1/getbodyfile endpoint via the uri parameter. The web application (through its vShare functionality section) doesn&#39;t properly check parameters, sent in HTTP requests as input, before saving them on the server. In addition, crafted JavaScript content can then be reflected back to the end user and executed by the web browser.</p> <p>An issue was discovered in LIVEBOX Collaboration vDesk through v018. Stored Cross-site Scripting (XSS) can occur under the /api/v1/getbodyfile endpoint via the uri parameter. The web application (through its vShare functionality section) doesn&#39;t properly check parameters, sent in HTTP requests as input, before saving them on the server. In addition, crafted JavaScript content can then be reflected back to the end user and executed by the web browser.</p> https://cve.radiocsirt.org/vuln/ghsa-ccrh-57hj-rh5r https://cve.radiocsirt.org/vuln/gsd-2022-45176 gsd-2022-45176 https://cve.radiocsirt.org/vuln/gsd-2022-45176