https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 02:24:03 +0000 https://cve.radiocsirt.org/vuln/cnvd-2020-14216 cnvd-2020-14216 https://cve.radiocsirt.org/vuln/cnvd-2020-14216 https://cve.radiocsirt.org/vuln/euvd-2026-37680 EUVD-2026-37680 https://cve.radiocsirt.org/vuln/euvd-2026-37680 https://cve.radiocsirt.org/vuln/fkie_cve-2020-7051 <p>Codologic Codoforum through 4.8.4 allows stored XSS in the login area. This is relevant in conjunction with CVE-2020-5842 because session cookies lack the HttpOnly flag. The impact is account takeover.</p> <p>Codologic Codoforum through 4.8.4 allows stored XSS in the login area. This is relevant in conjunction with CVE-2020-5842 because session cookies lack the HttpOnly flag. The impact is account takeover.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-7051 https://cve.radiocsirt.org/vuln/ghsa-7j87-m9r6-9c5r <p>An issue was discovered in Codologic Codoforum 4.8.4. While creating a new topic as a normal user, it is possible to add a poll that is automatically loaded in the DOM once the thread/topic is opened. Because session cookies lack the HttpOnly flag, it is possible to steal authentication cookies and take over accounts.</p> <p>An issue was discovered in Codologic Codoforum 4.8.4. While creating a new topic as a normal user, it is possible to add a poll that is automatically loaded in the DOM once the thread/topic is opened. Because session cookies lack the HttpOnly flag, it is possible to steal authentication cookies and take over accounts.</p> https://cve.radiocsirt.org/vuln/ghsa-7j87-m9r6-9c5r https://cve.radiocsirt.org/vuln/gsd-2020-7051 gsd-2020-7051 https://cve.radiocsirt.org/vuln/gsd-2020-7051