https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 03:10:40 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-186855 EUVD-2026-186855 https://cve.radiocsirt.org/vuln/euvd-2026-186855 https://cve.radiocsirt.org/vuln/fkie_cve-2023-32670 <p>Cross-Site Scripting vulnerability</p> <p>in BuddyBoss 2.2.9 version</p> <p>, which could allow a local attacker with basic privileges to execute a malicious payload through the &#34;[name]=image.jpg&#34; parameter, allowing to assign a persistent javascript payload that would be triggered when the associated image is loaded.</p> <p>Cross-Site Scripting vulnerability</p> <p>in BuddyBoss 2.2.9 version</p> <p>, which could allow a local attacker with basic privileges to execute a malicious payload through the &#34;[name]=image.jpg&#34; parameter, allowing to assign a persistent javascript payload that would be triggered when the associated image is loaded.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-32670 https://cve.radiocsirt.org/vuln/ghsa-qxv7-7h44-6g5h <p>Cross-Site Scripting vulnerability</p> <p>in BuddyBoss 2.2.9 version</p> <p>, which could allow a local attacker with basic privileges to execute a malicious payload through the &#34;[name]=image.jpg&#34; parameter, allowing to assign a persistent javascript payload that would be triggered when the associated image is loaded.</p> <p>Cross-Site Scripting vulnerability</p> <p>in BuddyBoss 2.2.9 version</p> <p>, which could allow a local attacker with basic privileges to execute a malicious payload through the &#34;[name]=image.jpg&#34; parameter, allowing to assign a persistent javascript payload that would be triggered when the associated image is loaded.</p> https://cve.radiocsirt.org/vuln/ghsa-qxv7-7h44-6g5h https://cve.radiocsirt.org/vuln/gsd-2023-32670 gsd-2023-32670 https://cve.radiocsirt.org/vuln/gsd-2023-32670