https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 14:54:45 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-14267 bdu:2026-14267 https://cve.radiocsirt.org/vuln/bdu:2026-14267 https://cve.radiocsirt.org/vuln/euvd-2026-367860 EUVD-2026-367860 https://cve.radiocsirt.org/vuln/euvd-2026-367860 https://cve.radiocsirt.org/vuln/fkie_cve-2026-85593 <p>phpMyFAQ versions before 4.1.8 contain a stored cross-site scripting vulnerability in FaqHelper::convertOldInternalLinks() that calls html_entity_decode() on sanitized FAQ content, reversing entity-encoding protection. Authenticated users with FAQ editing privileges can inject JavaScript payloads that execute in the browsers of all users viewing the affected FAQ pages.</p> <p>phpMyFAQ versions before 4.1.8 contain a stored cross-site scripting vulnerability in FaqHelper::convertOldInternalLinks() that calls html_entity_decode() on sanitized FAQ content, reversing entity-encoding protection. Authenticated users with FAQ editing privileges can inject JavaScript payloads that execute in the browsers of all users viewing the affected FAQ pages.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-85593 https://cve.radiocsirt.org/vuln/ghsa-2xm9-x25x-7x5q <p>phpMyFAQ versions before 4.1.8 contain a stored cross-site scripting vulnerability in FaqHelper::convertOldInternalLinks() that calls html_entity_decode() on sanitized FAQ content, reversing entity-encoding protection. Authenticated users with FAQ editing privileges can inject JavaScript payloads that execute in the browsers of all users viewing the affected FAQ pages.</p> <p>phpMyFAQ versions before 4.1.8 contain a stored cross-site scripting vulnerability in FaqHelper::convertOldInternalLinks() that calls html_entity_decode() on sanitized FAQ content, reversing entity-encoding protection. Authenticated users with FAQ editing privileges can inject JavaScript payloads that execute in the browsers of all users viewing the affected FAQ pages.</p> https://cve.radiocsirt.org/vuln/ghsa-2xm9-x25x-7x5q