https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 14 Oct 2026 21:00:41 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-110908 EUVD-2026-110908 https://cve.radiocsirt.org/vuln/euvd-2026-110908 https://cve.radiocsirt.org/vuln/fkie_cve-2012-2156 <p>Multiple cross-site scripting (XSS) vulnerabilities in Plume CMS 1.2.4 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the u_email parameter (aka Authors Email field) to manager/users.php, (2) the u_realname parameter (aka Authors Name field) to manager/users.php, or (3) the c_author parameter (aka Author field) in an ADD A COMMENT section.</p> <p>Multiple cross-site scripting (XSS) vulnerabilities in Plume CMS 1.2.4 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the u_email parameter (aka Authors Email field) to manager/users.php, (2) the u_realname parameter (aka Authors Name field) to manager/users.php, or (3) the c_author parameter (aka Author field) in an ADD A COMMENT section.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2012-2156 https://cve.radiocsirt.org/vuln/ghsa-9v4j-g8j9-mmgr <p>Multiple cross-site scripting (XSS) vulnerabilities in Plume CMS 1.2.4 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the u_email parameter (aka Authors Email field) to manager/users.php, (2) the u_realname parameter (aka Authors Name field) to manager/users.php, or (3) the c_author parameter (aka Author field) in an ADD A COMMENT section.</p> <p>Multiple cross-site scripting (XSS) vulnerabilities in Plume CMS 1.2.4 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the u_email parameter (aka Authors Email field) to manager/users.php, (2) the u_realname parameter (aka Authors Name field) to manager/users.php, or (3) the c_author parameter (aka Author field) in an ADD A COMMENT section.</p> https://cve.radiocsirt.org/vuln/ghsa-9v4j-g8j9-mmgr https://cve.radiocsirt.org/vuln/gsd-2012-2156 gsd-2012-2156 https://cve.radiocsirt.org/vuln/gsd-2012-2156