https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 18:00:29 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-9978 EUVD-2026-9978 https://cve.radiocsirt.org/vuln/euvd-2026-9978 https://cve.radiocsirt.org/vuln/fkie_cve-2023-48114 <p>SmarterTools SmarterMail 8495 through 8664 before 8747 allows stored XSS by using image/svg+xml and an uploaded SVG document. This occurs because the application tries to allow youtube.com URLs, but actually allows youtube.com followed by an @ character and an attacker-controlled domain name.</p> <p>SmarterTools SmarterMail 8495 through 8664 before 8747 allows stored XSS by using image/svg+xml and an uploaded SVG document. This occurs because the application tries to allow youtube.com URLs, but actually allows youtube.com followed by an @ character and an attacker-controlled domain name.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-48114 https://cve.radiocsirt.org/vuln/ghsa-qmhv-fq76-x3j5 <p>SmarterTools SmarterMail 16.x 8495 through 8664 before 8747 allows stored XSS by using image/svg+xml and an uploaded SVG document. This occurs because the application tries to allow youtube.com URLs, but actually allows youtube.com followed by an @ character and an attacker-controlled domain name.</p> <p>SmarterTools SmarterMail 16.x 8495 through 8664 before 8747 allows stored XSS by using image/svg+xml and an uploaded SVG document. This occurs because the application tries to allow youtube.com URLs, but actually allows youtube.com followed by an @ character and an attacker-controlled domain name.</p> https://cve.radiocsirt.org/vuln/ghsa-qmhv-fq76-x3j5 https://cve.radiocsirt.org/vuln/gsd-2023-48114 gsd-2023-48114 https://cve.radiocsirt.org/vuln/gsd-2023-48114