Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 22:16:22 +0000 cnvd-2018-05987 https://cve.radiocsirt.org/vuln/cnvd-2018-05987 cnvd-2018-05987 https://cve.radiocsirt.org/vuln/cnvd-2018-05987 EUVD-2026-63306 https://cve.radiocsirt.org/vuln/euvd-2026-63306 EUVD-2026-63306 https://cve.radiocsirt.org/vuln/euvd-2026-63306 fkie_cve-2018-7650 https://cve.radiocsirt.org/vuln/fkie_cve-2018-7650 <p>PHP Scripts Mall Hot Scripts Clone:Script Classified Version 3.1 Application is vulnerable to stored XSS within the &#34;Add New&#34; function for a Management User. Within the &#34;Add New&#34; section, the application does not sanitize user supplied input to the name parameter, and renders injected JavaScript code to the user&#39;s browser. This is different from CVE-2018-6878.</p> <p>PHP Scripts Mall Hot Scripts Clone:Script Classified Version 3.1 Application is vulnerable to stored XSS within the &#34;Add New&#34; function for a Management User. Within the &#34;Add New&#34; section, the application does not sanitize user supplied input to the name parameter, and renders injected JavaScript code to the user&#39;s browser. This is different from CVE-2018-6878.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-7650 GHSA-j6wc-m838-f4g8 https://cve.radiocsirt.org/vuln/ghsa-j6wc-m838-f4g8 <p>PHP Scripts Mall Hot Scripts Clone:Script Classified Version 3.1 Application is vulnerable to stored XSS within the &#34;Add New&#34; function for a Management User. Within the &#34;Add New&#34; section, the application does not sanitize user supplied input to the name parameter, and renders injected JavaScript code to the user&#39;s browser. This is different from CVE-2018-6878.</p> <p>PHP Scripts Mall Hot Scripts Clone:Script Classified Version 3.1 Application is vulnerable to stored XSS within the &#34;Add New&#34; function for a Management User. Within the &#34;Add New&#34; section, the application does not sanitize user supplied input to the name parameter, and renders injected JavaScript code to the user&#39;s browser. This is different from CVE-2018-6878.</p> https://cve.radiocsirt.org/vuln/ghsa-j6wc-m838-f4g8 gsd-2018-7650 https://cve.radiocsirt.org/vuln/gsd-2018-7650 gsd-2018-7650 https://cve.radiocsirt.org/vuln/gsd-2018-7650