https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 18:01:51 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-322455 EUVD-2026-322455 https://cve.radiocsirt.org/vuln/euvd-2026-322455 https://cve.radiocsirt.org/vuln/fkie_cve-2021-47924 <p>Ultimate Product Catalogue 5.8.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the price parameter. Attackers can submit POST requests to post.php with HTML/JavaScript payloads in the price field to execute arbitrary code when the product is viewed.</p> <p>Ultimate Product Catalogue 5.8.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the price parameter. Attackers can submit POST requests to post.php with HTML/JavaScript payloads in the price field to execute arbitrary code when the product is viewed.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-47924 https://cve.radiocsirt.org/vuln/ghsa-qwj3-2cv8-c6jp <p>Ultimate Product Catalog 5.8.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the price parameter. Attackers can submit POST requests to post.php with HTML/JavaScript payloads in the price field to execute arbitrary code when the product is viewed.</p> <p>Ultimate Product Catalog 5.8.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the price parameter. Attackers can submit POST requests to post.php with HTML/JavaScript payloads in the price field to execute arbitrary code when the product is viewed.</p> https://cve.radiocsirt.org/vuln/ghsa-qwj3-2cv8-c6jp