Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 22:52:44 +0000 EUVD-2026-253678 https://cve.radiocsirt.org/vuln/euvd-2026-253678 EUVD-2026-253678 https://cve.radiocsirt.org/vuln/euvd-2026-253678 fkie_cve-2024-24336 https://cve.radiocsirt.org/vuln/fkie_cve-2024-24336 <p>A multiple Cross-site scripting (XSS) vulnerability in the &#39;/members/moremember.pl&#39;, and ‘/members/members-home.pl’ endpoints within Koha Library Management System version 23.05.05 and earlier allows malicious staff users to carry out CSRF attacks, including unauthorized changes to usernames and passwords of users visiting the affected page, via the &#39;Circulation note&#39; and ‘Patrons Restriction’ components.</p> <p>A multiple Cross-site scripting (XSS) vulnerability in the &#39;/members/moremember.pl&#39;, and ‘/members/members-home.pl’ endpoints within Koha Library Management System version 23.05.05 and earlier allows malicious staff users to carry out CSRF attacks, including unauthorized changes to usernames and passwords of users visiting the affected page, via the &#39;Circulation note&#39; and ‘Patrons Restriction’ components.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-24336 GHSA-w853-6hc5-89h2 https://cve.radiocsirt.org/vuln/ghsa-w853-6hc5-89h2 <p>A multiple Cross-site scripting (XSS) vulnerability in the &#39;/members/moremember.pl&#39;, and ‘/members/members-home.pl’ endpoints within Koha Library Management System version 23.05.05 and earlier allows malicious staff users to carry out CSRF attacks, including unauthorized changes to usernames and passwords of users visiting the affected page, via the &#39;Circulation note&#39; and ‘Patrons Restriction’ components.</p> <p>A multiple Cross-site scripting (XSS) vulnerability in the &#39;/members/moremember.pl&#39;, and ‘/members/members-home.pl’ endpoints within Koha Library Management System version 23.05.05 and earlier allows malicious staff users to carry out CSRF attacks, including unauthorized changes to usernames and passwords of users visiting the affected page, via the &#39;Circulation note&#39; and ‘Patrons Restriction’ components.</p> https://cve.radiocsirt.org/vuln/ghsa-w853-6hc5-89h2 gsd-2024-24336 https://cve.radiocsirt.org/vuln/gsd-2024-24336 gsd-2024-24336 https://cve.radiocsirt.org/vuln/gsd-2024-24336