https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 23:35:16 +0000 https://cve.radiocsirt.org/vuln/cnvd-2020-68861 cnvd-2020-68861 https://cve.radiocsirt.org/vuln/cnvd-2020-68861 https://cve.radiocsirt.org/vuln/euvd-2026-47415 EUVD-2026-47415 https://cve.radiocsirt.org/vuln/euvd-2026-47415 https://cve.radiocsirt.org/vuln/fkie_cve-2020-29456 <p>Multiple cross-site scripting (XSS) vulnerabilities in Papermerge before 1.5.2 allow remote attackers to inject arbitrary web script or HTML via the rename, tag, upload, or create folder function. The payload can be in a folder, a tag, or a document&#39;s filename. If email consumption is configured in Papermerge, a malicious document can be sent by email and is automatically uploaded into the Papermerge web application. Therefore, no authentication is required to exploit XSS if email consumption is configured. Otherwise authentication is required.</p> <p>Multiple cross-site scripting (XSS) vulnerabilities in Papermerge before 1.5.2 allow remote attackers to inject arbitrary web script or HTML via the rename, tag, upload, or create folder function. The payload can be in a folder, a tag, or a document&#39;s filename. If email consumption is configured in Papermerge, a malicious document can be sent by email and is automatically uploaded into the Papermerge web application. Therefore, no authentication is required to exploit XSS if email consumption is configured. Otherwise authentication is required.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-29456 https://cve.radiocsirt.org/vuln/ghsa-9w49-m7xh-5r39 <p><strong>Affected:</strong> PyPI: papermerge</p> <p>Multiple cross-site scripting (XSS) vulnerabilities in Papermerge before 1.5.2 allow remote attackers to inject arbitrary web script or HTML via the rename, tag, upload, or create folder function. The payload can be in a folder, a tag, or a document&#39;s filename. If email consumption is configured in Papermerge, a malicious document can be sent by email and is automatically uploaded into the Papermerge web application. Therefore, no authentication is required to exploit XSS if email consumption is configured. Otherwise authentication is required.</p> <p><strong>Affected:</strong> PyPI: papermerge</p> <p>Multiple cross-site scripting (XSS) vulnerabilities in Papermerge before 1.5.2 allow remote attackers to inject arbitrary web script or HTML via the rename, tag, upload, or create folder function. The payload can be in a folder, a tag, or a document&#39;s filename. If email consumption is configured in Papermerge, a malicious document can be sent by email and is automatically uploaded into the Papermerge web application. Therefore, no authentication is required to exploit XSS if email consumption is configured. Otherwise authentication is required.</p> https://cve.radiocsirt.org/vuln/ghsa-9w49-m7xh-5r39 https://cve.radiocsirt.org/vuln/gsd-2020-29456 gsd-2020-29456 https://cve.radiocsirt.org/vuln/gsd-2020-29456 https://cve.radiocsirt.org/vuln/pysec-2020-74 <p><strong>Affected:</strong> PyPI: papermerge</p> <p>Multiple cross-site scripting (XSS) vulnerabilities in Papermerge before 1.5.2 allow remote attackers to inject arbitrary web script or HTML via the rename, tag, upload, or create folder function. The payload can be in a folder, a tag, or a document&#39;s filename. If email consumption is configured in Papermerge, a malicious document can be sent by email and is automatically uploaded into the Papermerge web application. Therefore, no authentication is required to exploit XSS if email consumption is configured. Otherwise authentication is required.</p> <p><strong>Affected:</strong> PyPI: papermerge</p> <p>Multiple cross-site scripting (XSS) vulnerabilities in Papermerge before 1.5.2 allow remote attackers to inject arbitrary web script or HTML via the rename, tag, upload, or create folder function. The payload can be in a folder, a tag, or a document&#39;s filename. If email consumption is configured in Papermerge, a malicious document can be sent by email and is automatically uploaded into the Papermerge web application. Therefore, no authentication is required to exploit XSS if email consumption is configured. Otherwise authentication is required.</p> https://cve.radiocsirt.org/vuln/pysec-2020-74