https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 21 Oct 2026 21:51:10 +0000 https://cve.radiocsirt.org/vuln/cnvd-2021-17765 cnvd-2021-17765 https://cve.radiocsirt.org/vuln/cnvd-2021-17765 https://cve.radiocsirt.org/vuln/euvd-2026-60874 EUVD-2026-60874 https://cve.radiocsirt.org/vuln/euvd-2026-60874 https://cve.radiocsirt.org/vuln/fkie_cve-2018-0655 <p>Cross-site scripting vulnerability in GROWI v.3.1.11 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via the app settings section of admin page.</p> <p>Cross-site scripting vulnerability in GROWI v.3.1.11 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via the app settings section of admin page.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-0655 https://cve.radiocsirt.org/vuln/ghsa-24xr-357g-63vh <p>Cross-site scripting vulnerability in GROWI v.3.1.11 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via the app settings section of admin page.</p> <p>Cross-site scripting vulnerability in GROWI v.3.1.11 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via the app settings section of admin page.</p> https://cve.radiocsirt.org/vuln/ghsa-24xr-357g-63vh https://cve.radiocsirt.org/vuln/gsd-2018-0655 gsd-2018-0655 https://cve.radiocsirt.org/vuln/gsd-2018-0655 https://cve.radiocsirt.org/vuln/jvndb-2018-000085 <p>GROWI provided by WESEEK, Inc. contains multiple cross-site scripting vulnerabilities listed below. * Stored cross-site scripting vulnerability in the UserGroup Management section of admin page (CWE-79) - CVE-2018-0652 * Stored cross-site scripting vulnerability in Wiki page view (CWE-79) - CVE-2018-0653 * Reflected cross-site scripting vulnerability in the modal for creating Wiki page (CWE-79) - CVE-2018-0654 * Stored cross-site scripting in the app settings section of admin page (CWE-79) - CVE-2018-0655 The following researchers reported the vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2018-0652, CVE-2018-0653 Yoshinori Hayashi of Information Science College CVE-2018-0654, CVE-2018-0655 Kanta Nishitani of Information Science College</p> <p>GROWI provided by WESEEK, Inc. contains multiple cross-site scripting vulnerabilities listed below. * Stored cross-site scripting vulnerability in the UserGroup Management section of admin page (CWE-79) - CVE-2018-0652 * Stored cross-site scripting vulnerability in Wiki page view (CWE-79) - CVE-2018-0653 * Reflected cross-site scripting vulnerability in the modal for creating Wiki page (CWE-79) - CVE-2018-0654 * Stored cross-site scripting in the app settings section of admin page (CWE-79) - CVE-2018-0655 The following researchers reported the vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2018-0652, CVE-2018-0653 Yoshinori Hayashi of Information Science College CVE-2018-0654, CVE-2018-0655 Kanta Nishitani of Information Science College</p> https://cve.radiocsirt.org/vuln/jvndb-2018-000085