Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 22 Oct 2026 20:42:39 +0000 bdu:2021-03847 https://cve.radiocsirt.org/vuln/bdu:2021-03847 bdu:2021-03847 https://cve.radiocsirt.org/vuln/bdu:2021-03847 cnvd-2020-16824 https://cve.radiocsirt.org/vuln/cnvd-2020-16824 cnvd-2020-16824 https://cve.radiocsirt.org/vuln/cnvd-2020-16824 EUVD-2026-56573 https://cve.radiocsirt.org/vuln/euvd-2026-56573 EUVD-2026-56573 https://cve.radiocsirt.org/vuln/euvd-2026-56573 fkie_cve-2019-14750 https://cve.radiocsirt.org/vuln/fkie_cve-2019-14750 <p>An issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1. Stored XSS exists in setup/install.php. It was observed that no input sanitization was provided in the firstname and lastname fields of the application. The insertion of malicious queries in those fields leads to the execution of those queries. This can further lead to cookie stealing or other malicious actions.</p> <p>An issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1. Stored XSS exists in setup/install.php. It was observed that no input sanitization was provided in the firstname and lastname fields of the application. The insertion of malicious queries in those fields leads to the execution of those queries. This can further lead to cookie stealing or other malicious actions.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-14750 GHSA-wj9g-5wf3-5pxf https://cve.radiocsirt.org/vuln/ghsa-wj9g-5wf3-5pxf <p>An issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1. Stored XSS exists in setup/install.php. It was observed that no input sanitization was provided in the firstname and lastname fields of the application. The insertion of malicious queries in those fields leads to the execution of those queries. This can further lead to cookie stealing or other malicious actions.</p> <p>An issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1. Stored XSS exists in setup/install.php. It was observed that no input sanitization was provided in the firstname and lastname fields of the application. The insertion of malicious queries in those fields leads to the execution of those queries. This can further lead to cookie stealing or other malicious actions.</p> https://cve.radiocsirt.org/vuln/ghsa-wj9g-5wf3-5pxf gsd-2019-14750 https://cve.radiocsirt.org/vuln/gsd-2019-14750 gsd-2019-14750 https://cve.radiocsirt.org/vuln/gsd-2019-14750