https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 16:12:36 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-231619 EUVD-2026-231619 https://cve.radiocsirt.org/vuln/euvd-2026-231619 https://cve.radiocsirt.org/vuln/fkie_cve-2023-29049 <p>The &#34;upsell&#34; widget at the portal page could be abused to inject arbitrary script code. Attackers that manage to lure users to a compromised account, or gain temporary access to a legitimate account, could inject script code to gain persistent code execution capabilities under a trusted domain. User input for this widget is now sanitized to avoid malicious content the be processed. No publicly available exploits are known.</p> <p>The &#34;upsell&#34; widget at the portal page could be abused to inject arbitrary script code. Attackers that manage to lure users to a compromised account, or gain temporary access to a legitimate account, could inject script code to gain persistent code execution capabilities under a trusted domain. User input for this widget is now sanitized to avoid malicious content the be processed. No publicly available exploits are known.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-29049 https://cve.radiocsirt.org/vuln/ghsa-pgpx-675x-4jcv <p>The &#34;upsell&#34; widget at the portal page could be abused to inject arbitrary script code. Attackers that manage to lure users to a compromised account, or gain temporary access to a legitimate account, could inject script code to gain persistent code execution capabilities under a trusted domain. User input for this widget is now sanitized to avoid malicious content the be processed. No publicly available exploits are known.</p> <p>The &#34;upsell&#34; widget at the portal page could be abused to inject arbitrary script code. Attackers that manage to lure users to a compromised account, or gain temporary access to a legitimate account, could inject script code to gain persistent code execution capabilities under a trusted domain. User input for this widget is now sanitized to avoid malicious content the be processed. No publicly available exploits are known.</p> https://cve.radiocsirt.org/vuln/ghsa-pgpx-675x-4jcv https://cve.radiocsirt.org/vuln/gsd-2023-29049 gsd-2023-29049 https://cve.radiocsirt.org/vuln/gsd-2023-29049 https://cve.radiocsirt.org/vuln/oxas-adv-2023-0005 OXAS-ADV-2023-0005 https://cve.radiocsirt.org/vuln/oxas-adv-2023-0005