https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 22:10:47 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-329331 EUVD-2026-329331 https://cve.radiocsirt.org/vuln/euvd-2026-329331 https://cve.radiocsirt.org/vuln/fkie_cve-2019-25317 <p>Kimai 2 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts into timesheet descriptions. Attackers can insert SVG-based XSS payloads in the description field to execute arbitrary JavaScript when the page is loaded and viewed by other users.</p> <p>Kimai 2 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts into timesheet descriptions. Attackers can insert SVG-based XSS payloads in the description field to execute arbitrary JavaScript when the page is loaded and viewed by other users.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-25317 https://cve.radiocsirt.org/vuln/ghsa-9278-6hcj-2p4j <p><strong>Affected:</strong> Packagist: kimai/kimai</p> <p>Kimai 2 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts into timesheet descriptions. Attackers can insert SVG-based XSS payloads in the description field to execute arbitrary JavaScript when the page is loaded and viewed by other users.</p> <p><strong>Affected:</strong> Packagist: kimai/kimai</p> <p>Kimai 2 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts into timesheet descriptions. Attackers can insert SVG-based XSS payloads in the description field to execute arbitrary JavaScript when the page is loaded and viewed by other users.</p> https://cve.radiocsirt.org/vuln/ghsa-9278-6hcj-2p4j