https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 10:28:00 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-07880 bdu:2026-07880 https://cve.radiocsirt.org/vuln/bdu:2026-07880 https://cve.radiocsirt.org/vuln/euvd-2026-336554 EUVD-2026-336554 https://cve.radiocsirt.org/vuln/euvd-2026-336554 https://cve.radiocsirt.org/vuln/fkie_cve-2026-22678 <p>Webmin before 2.641 contains a stored cross-site scripting vulnerability in the email template description field of the System and Server Status module that allows low-privileged authenticated attackers to execute arbitrary JavaScript in the browser context of administrators by injecting unsanitized input stored in save_tmpl.cgi and rendered unescaped in list_tmpls.cgi.</p> <p>Webmin before 2.641 contains a stored cross-site scripting vulnerability in the email template description field of the System and Server Status module that allows low-privileged authenticated attackers to execute arbitrary JavaScript in the browser context of administrators by injecting unsanitized input stored in save_tmpl.cgi and rendered unescaped in list_tmpls.cgi.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-22678 https://cve.radiocsirt.org/vuln/ghsa-vxwv-pg73-pf78 <p>Webmin before 2.641 contains a stored cross-site scripting vulnerability in the email template description field of the System and Server Status module that allows low-privileged authenticated attackers to execute arbitrary commands by injecting unsanitized input stored in save_tmpl.cgi and rendered unescaped in list_tmpls.cgi.</p> <p>Webmin before 2.641 contains a stored cross-site scripting vulnerability in the email template description field of the System and Server Status module that allows low-privileged authenticated attackers to execute arbitrary commands by injecting unsanitized input stored in save_tmpl.cgi and rendered unescaped in list_tmpls.cgi.</p> https://cve.radiocsirt.org/vuln/ghsa-vxwv-pg73-pf78 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1648 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Webmin ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Webmin ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1648