Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 16:32:42 +0000 bdu:2026-04922 https://cve.radiocsirt.org/vuln/bdu:2026-04922 bdu:2026-04922 https://cve.radiocsirt.org/vuln/bdu:2026-04922 EUVD-2026-264762 https://cve.radiocsirt.org/vuln/euvd-2026-264762 EUVD-2026-264762 https://cve.radiocsirt.org/vuln/euvd-2026-264762 fkie_cve-2025-66824 https://cve.radiocsirt.org/vuln/fkie_cve-2025-66824 <p>A Stored Cross-Site Scripting (XSS) vulnerability exists in the Meeting location field of the Create/Edit Conference functionality in TrueConf Server v5.5.2.10813. The injected payload is stored via the meeting_room parameter and executed when users visit the Conference Info page, allowing attackers to achieve full Account Takeover (ATO). This issue is caused by improper sanitization of user-supplied input in the meeting_room field.</p> <p>A Stored Cross-Site Scripting (XSS) vulnerability exists in the Meeting location field of the Create/Edit Conference functionality in TrueConf Server v5.5.2.10813. The injected payload is stored via the meeting_room parameter and executed when users visit the Conference Info page, allowing attackers to achieve full Account Takeover (ATO). This issue is caused by improper sanitization of user-supplied input in the meeting_room field.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-66824 GHSA-wc9p-rvp2-mc4r https://cve.radiocsirt.org/vuln/ghsa-wc9p-rvp2-mc4r <p>A Stored Cross-Site Scripting (XSS) vulnerability exists in the Meeting location field of the Create/Edit Conference functionality in TrueConf Server v5.5.2.10813. The injected payload is stored via the meeting_room parameter and executed when users visit the Conference Info page, allowing attackers to achieve full Account Takeover (ATO). This issue is caused by improper sanitization of user-supplied input in the meeting_room field.</p> <p>A Stored Cross-Site Scripting (XSS) vulnerability exists in the Meeting location field of the Create/Edit Conference functionality in TrueConf Server v5.5.2.10813. The injected payload is stored via the meeting_room parameter and executed when users visit the Conference Info page, allowing attackers to achieve full Account Takeover (ATO). This issue is caused by improper sanitization of user-supplied input in the meeting_room field.</p> https://cve.radiocsirt.org/vuln/ghsa-wc9p-rvp2-mc4r