Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 21:46:00 +0000 EUVD-2026-321077 https://cve.radiocsirt.org/vuln/euvd-2026-321077 EUVD-2026-321077 https://cve.radiocsirt.org/vuln/euvd-2026-321077 fkie_cve-2021-47907 https://cve.radiocsirt.org/vuln/fkie_cve-2021-47907 <p>Rocket LMS 1.1 contains a persistent cross-site scripting vulnerability in the support ticket module that allows authenticated users to inject malicious script code through the title parameter. Attackers can submit support tickets with embedded HTML/JavaScript payloads that execute in the browsers of other users viewing the message history, enabling session hijacking and phishing attacks.</p> <p>Rocket LMS 1.1 contains a persistent cross-site scripting vulnerability in the support ticket module that allows authenticated users to inject malicious script code through the title parameter. Attackers can submit support tickets with embedded HTML/JavaScript payloads that execute in the browsers of other users viewing the message history, enabling session hijacking and phishing attacks.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-47907 GHSA-p5cq-w88f-fj6p https://cve.radiocsirt.org/vuln/ghsa-p5cq-w88f-fj6p <p>Rocket LMS 1.1 contains a persistent cross-site scripting vulnerability in the support ticket module that allows authenticated users to inject malicious script code through the title parameter. Attackers can submit support tickets with embedded HTML/JavaScript payloads that execute in the browsers of other users viewing the message history, enabling session hijacking and phishing attacks.</p> <p>Rocket LMS 1.1 contains a persistent cross-site scripting vulnerability in the support ticket module that allows authenticated users to inject malicious script code through the title parameter. Attackers can submit support tickets with embedded HTML/JavaScript payloads that execute in the browsers of other users viewing the message history, enabling session hijacking and phishing attacks.</p> https://cve.radiocsirt.org/vuln/ghsa-p5cq-w88f-fj6p