Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 14 Oct 2026 14:09:32 +0000 cnvd-2021-48516 https://cve.radiocsirt.org/vuln/cnvd-2021-48516 cnvd-2021-48516 https://cve.radiocsirt.org/vuln/cnvd-2021-48516 EUVD-2026-48150 https://cve.radiocsirt.org/vuln/euvd-2026-48150 EUVD-2026-48150 https://cve.radiocsirt.org/vuln/euvd-2026-48150 fkie_cve-2020-36397 https://cve.radiocsirt.org/vuln/fkie_cve-2020-36397 <p>A stored cross site scripting (XSS) vulnerability in the /admin/contact/contact component of LavaLite 5.8.0 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the &#34;New&#34; parameter.</p> <p>A stored cross site scripting (XSS) vulnerability in the /admin/contact/contact component of LavaLite 5.8.0 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the &#34;New&#34; parameter.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-36397 GHSA-3cfg-rxh6-h2rh — LavaLite Stored Cross-site Scripting vulnerability https://cve.radiocsirt.org/vuln/ghsa-3cfg-rxh6-h2rh <p><strong>Affected:</strong> Packagist: lavalite/cms</p> <p>A stored cross site scripting (XSS) vulnerability in the `/admin/contact/contact` component of LavaLite 5.8.0 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the `New` parameter.</p> <p><strong>Affected:</strong> Packagist: lavalite/cms</p> <p>A stored cross site scripting (XSS) vulnerability in the `/admin/contact/contact` component of LavaLite 5.8.0 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the `New` parameter.</p> https://cve.radiocsirt.org/vuln/ghsa-3cfg-rxh6-h2rh gsd-2020-36397 https://cve.radiocsirt.org/vuln/gsd-2020-36397 gsd-2020-36397 https://cve.radiocsirt.org/vuln/gsd-2020-36397