https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 03:42:45 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-02786 bdu:2024-02786 https://cve.radiocsirt.org/vuln/bdu:2024-02786 https://cve.radiocsirt.org/vuln/euvd-2026-242625 EUVD-2026-242625 https://cve.radiocsirt.org/vuln/euvd-2026-242625 https://cve.radiocsirt.org/vuln/fkie_cve-2024-23173 <p>An issue was discovered in the Cargo extension in MediaWiki before 1.35.14, 1.36.x through 1.39.x before 1.39.6, and 1.40.x before 1.40.2. The Special:Drilldown page allows XSS via artist, album, and position parameters because of applied filter values in drilldown/CargoAppliedFilter.php.</p> <p>An issue was discovered in the Cargo extension in MediaWiki before 1.35.14, 1.36.x through 1.39.x before 1.39.6, and 1.40.x before 1.40.2. The Special:Drilldown page allows XSS via artist, album, and position parameters because of applied filter values in drilldown/CargoAppliedFilter.php.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-23173 https://cve.radiocsirt.org/vuln/ghsa-rhpm-63w5-79rg <p><strong>Affected:</strong> Packagist: mediawiki/cargo</p> <p>An issue was discovered in the Cargo extension in MediaWiki before 1.35.14, 1.36.x through 1.39.x before 1.39.6, and 1.40.x before 1.40.2. The Special:Drilldown page allows XSS via artist, album, and position parameters because of applied filter values in drilldown/CargoAppliedFilter.php.</p> <p><strong>Affected:</strong> Packagist: mediawiki/cargo</p> <p>An issue was discovered in the Cargo extension in MediaWiki before 1.35.14, 1.36.x through 1.39.x before 1.39.6, and 1.40.x before 1.40.2. The Special:Drilldown page allows XSS via artist, album, and position parameters because of applied filter values in drilldown/CargoAppliedFilter.php.</p> https://cve.radiocsirt.org/vuln/ghsa-rhpm-63w5-79rg https://cve.radiocsirt.org/vuln/gsd-2024-23173 gsd-2024-23173 https://cve.radiocsirt.org/vuln/gsd-2024-23173 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0083 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in MediaWiki ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in MediaWiki ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0083