https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 03:46:24 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-375059 EUVD-2026-375059 https://cve.radiocsirt.org/vuln/euvd-2026-375059 https://cve.radiocsirt.org/vuln/fkie_cve-2026-90561 <p>Strapi versions 4.x through 4.26.2 and 5.x before 5.48.1 contain a stored cross-site scripting vulnerability in the content manager WYSIWYG preview component that fails to strip script tags from rich text. An Author-role user can store malicious script tags in rich text fields that execute in an Editor or Super Admin&#39;s session when the preview pane is expanded, enabling account takeover.</p> <p>Strapi versions 4.x through 4.26.2 and 5.x before 5.48.1 contain a stored cross-site scripting vulnerability in the content manager WYSIWYG preview component that fails to strip script tags from rich text. An Author-role user can store malicious script tags in rich text fields that execute in an Editor or Super Admin&#39;s session when the preview pane is expanded, enabling account takeover.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-90561 https://cve.radiocsirt.org/vuln/ghsa-jh7v-p6jw-jwhc <p>Strapi versions 4.x through 4.26.2 and 5.x before 5.48.1 contain a stored cross-site scripting vulnerability in the content manager WYSIWYG preview component that fails to strip script tags from rich text. An Author-role user can store malicious script tags in rich text fields that execute in an Editor or Super Admin&#39;s session when the preview pane is expanded, enabling account takeover.</p> <p>Strapi versions 4.x through 4.26.2 and 5.x before 5.48.1 contain a stored cross-site scripting vulnerability in the content manager WYSIWYG preview component that fails to strip script tags from rich text. An Author-role user can store malicious script tags in rich text fields that execute in an Editor or Super Admin&#39;s session when the preview pane is expanded, enabling account takeover.</p> https://cve.radiocsirt.org/vuln/ghsa-jh7v-p6jw-jwhc https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3324 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Strapi ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Strapi ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3324