Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 17:27:35 +0000 EUVD-2026-128775 https://cve.radiocsirt.org/vuln/euvd-2026-128775 EUVD-2026-128775 https://cve.radiocsirt.org/vuln/euvd-2026-128775 fkie_cve-2008-3700 https://cve.radiocsirt.org/vuln/fkie_cve-2008-3700 <p>Multiple cross-site scripting (XSS) vulnerabilities in Kayako SupportSuite 3.20.02 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the sessionid parameter in a livesupport startclientchat action to visitor/index.php; (2) the filter parameter in a news view action to index.php; or the Full Name field in a (3) account creation, (4) ticket opening, or (5) chat request operation.</p> <p>Multiple cross-site scripting (XSS) vulnerabilities in Kayako SupportSuite 3.20.02 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the sessionid parameter in a livesupport startclientchat action to visitor/index.php; (2) the filter parameter in a news view action to index.php; or the Full Name field in a (3) account creation, (4) ticket opening, or (5) chat request operation.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2008-3700 GHSA-xxqm-cf86-wmxp https://cve.radiocsirt.org/vuln/ghsa-xxqm-cf86-wmxp <p>Multiple cross-site scripting (XSS) vulnerabilities in Kayako SupportSuite 3.20.02 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the sessionid parameter in a livesupport startclientchat action to visitor/index.php; (2) the filter parameter in a news view action to index.php; or the Full Name field in a (3) account creation, (4) ticket opening, or (5) chat request operation.</p> <p>Multiple cross-site scripting (XSS) vulnerabilities in Kayako SupportSuite 3.20.02 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the sessionid parameter in a livesupport startclientchat action to visitor/index.php; (2) the filter parameter in a news view action to index.php; or the Full Name field in a (3) account creation, (4) ticket opening, or (5) chat request operation.</p> https://cve.radiocsirt.org/vuln/ghsa-xxqm-cf86-wmxp gsd-2008-3700 https://cve.radiocsirt.org/vuln/gsd-2008-3700 gsd-2008-3700 https://cve.radiocsirt.org/vuln/gsd-2008-3700