https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 09:27:13 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-102352 EUVD-2026-102352 https://cve.radiocsirt.org/vuln/euvd-2026-102352 https://cve.radiocsirt.org/vuln/fkie_cve-2014-7264 <p>Multiple cross-site scripting (XSS) vulnerabilities in admin/themes/default/pages/manage_users.twig in the Users Management feature in the admin component in Chyrp before 2.5.1 allow remote authenticated users to inject arbitrary web script or HTML via the (1) user.email or (2) user.website field in a user registration.</p> <p>Multiple cross-site scripting (XSS) vulnerabilities in admin/themes/default/pages/manage_users.twig in the Users Management feature in the admin component in Chyrp before 2.5.1 allow remote authenticated users to inject arbitrary web script or HTML via the (1) user.email or (2) user.website field in a user registration.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2014-7264 https://cve.radiocsirt.org/vuln/ghsa-4wpp-v97f-6975 <p>Multiple cross-site scripting (XSS) vulnerabilities in admin/themes/default/pages/manage_users.twig in the Users Management feature in the admin component in Chyrp before 2.5.1 allow remote authenticated users to inject arbitrary web script or HTML via the (1) user.email or (2) user.website field in a user registration.</p> <p>Multiple cross-site scripting (XSS) vulnerabilities in admin/themes/default/pages/manage_users.twig in the Users Management feature in the admin component in Chyrp before 2.5.1 allow remote authenticated users to inject arbitrary web script or HTML via the (1) user.email or (2) user.website field in a user registration.</p> https://cve.radiocsirt.org/vuln/ghsa-4wpp-v97f-6975 https://cve.radiocsirt.org/vuln/gsd-2014-7264 gsd-2014-7264 https://cve.radiocsirt.org/vuln/gsd-2014-7264 https://cve.radiocsirt.org/vuln/jvndb-2014-000149 <p>Chyrp is a blogging engine. Chyrp contains a cross-site scripting vulnerability. Yuji Tounai of NTT Com Security (Japan) KK reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> <p>Chyrp is a blogging engine. Chyrp contains a cross-site scripting vulnerability. Yuji Tounai of NTT Com Security (Japan) KK reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> https://cve.radiocsirt.org/vuln/jvndb-2014-000149