https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 20:16:36 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-318245 EUVD-2026-318245 https://cve.radiocsirt.org/vuln/euvd-2026-318245 https://cve.radiocsirt.org/vuln/fkie_cve-2020-37103 <p>DotNetNuke 9.5 contains a persistent cross-site scripting vulnerability that allows normal users to upload malicious XML files with executable scripts through journal tools. Attackers can upload XML files with XHTML namespace scripts to execute arbitrary JavaScript in users&#39; browsers, potentially bypassing CSRF protections and performing more damaging attacks.</p> <p>DotNetNuke 9.5 contains a persistent cross-site scripting vulnerability that allows normal users to upload malicious XML files with executable scripts through journal tools. Attackers can upload XML files with XHTML namespace scripts to execute arbitrary JavaScript in users&#39; browsers, potentially bypassing CSRF protections and performing more damaging attacks.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-37103 https://cve.radiocsirt.org/vuln/ghsa-mwcw-c9qw-pvc9 <p>DotNetNuke 9.5 contains a persistent cross-site scripting vulnerability that allows normal users to upload malicious XML files with executable scripts through journal tools. Attackers can upload XML files with XHTML namespace scripts to execute arbitrary JavaScript in users&#39; browsers, potentially bypassing CSRF protections and performing more damaging attacks.</p> <p>DotNetNuke 9.5 contains a persistent cross-site scripting vulnerability that allows normal users to upload malicious XML files with executable scripts through journal tools. Attackers can upload XML files with XHTML namespace scripts to execute arbitrary JavaScript in users&#39; browsers, potentially bypassing CSRF protections and performing more damaging attacks.</p> https://cve.radiocsirt.org/vuln/ghsa-mwcw-c9qw-pvc9