https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 16:36:00 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-322141 EUVD-2026-322141 https://cve.radiocsirt.org/vuln/euvd-2026-322141 https://cve.radiocsirt.org/vuln/fkie_cve-2018-25349 <p>userSpice 4.3.24 contains a cross-site scripting vulnerability that allows attackers to inject malicious scripts through the X-Forwarded-For HTTP header. Attackers can send crafted requests to the backup.php endpoint with XSS payloads in the X-Forwarded-For header that execute when administrators visit the audit log page.</p> <p>userSpice 4.3.24 contains a cross-site scripting vulnerability that allows attackers to inject malicious scripts through the X-Forwarded-For HTTP header. Attackers can send crafted requests to the backup.php endpoint with XSS payloads in the X-Forwarded-For header that execute when administrators visit the audit log page.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-25349 https://cve.radiocsirt.org/vuln/ghsa-7m67-452p-94vw <p>userSpice 4.3.24 contains a cross-site scripting vulnerability that allows attackers to inject malicious scripts through the X-Forwarded-For HTTP header. Attackers can send crafted requests to the backup.php endpoint with XSS payloads in the X-Forwarded-For header that execute when administrators visit the audit log page.</p> <p>userSpice 4.3.24 contains a cross-site scripting vulnerability that allows attackers to inject malicious scripts through the X-Forwarded-For HTTP header. Attackers can send crafted requests to the backup.php endpoint with XSS payloads in the X-Forwarded-For header that execute when administrators visit the audit log page.</p> https://cve.radiocsirt.org/vuln/ghsa-7m67-452p-94vw