Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 10:43:17 +0000 cnvd-2022-87951 https://cve.radiocsirt.org/vuln/cnvd-2022-87951 cnvd-2022-87951 https://cve.radiocsirt.org/vuln/cnvd-2022-87951 EUVD-2026-173438 https://cve.radiocsirt.org/vuln/euvd-2026-173438 EUVD-2026-173438 https://cve.radiocsirt.org/vuln/euvd-2026-173438 fkie_cve-2022-32172 https://cve.radiocsirt.org/vuln/fkie_cve-2022-32172 <p>In Zinc, versions v0.1.9 through v0.3.1 are vulnerable to Stored Cross-Site Scripting when using the delete template functionality. When an authenticated user deletes a template with a XSS payload in the name field, the Javascript payload will be executed and allow an attacker to access the user’s credentials.</p> <p>In Zinc, versions v0.1.9 through v0.3.1 are vulnerable to Stored Cross-Site Scripting when using the delete template functionality. When an authenticated user deletes a template with a XSS payload in the name field, the Javascript payload will be executed and allow an attacker to access the user’s credentials.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-32172 GHSA-7j6x-42mm-p7jm — Zinc Cross-site Scripting vulnerability https://cve.radiocsirt.org/vuln/ghsa-7j6x-42mm-p7jm <p><strong>Affected:</strong> Go: github.com/zincsearch/zincsearch, Go: github.com/zinclabs/zinc</p> <p>In Zinc, versions v0.1.9 through v0.3.1 are vulnerable to Stored Cross-Site Scripting when using the delete template functionality. When an authenticated user deletes a template with a XSS payload in the name field, the Javascript payload will be executed and allow an attacker to access the user’s credentials.</p> <p><strong>Affected:</strong> Go: github.com/zincsearch/zincsearch, Go: github.com/zinclabs/zinc</p> <p>In Zinc, versions v0.1.9 through v0.3.1 are vulnerable to Stored Cross-Site Scripting when using the delete template functionality. When an authenticated user deletes a template with a XSS payload in the name field, the Javascript payload will be executed and allow an attacker to access the user’s credentials.</p> https://cve.radiocsirt.org/vuln/ghsa-7j6x-42mm-p7jm gsd-2022-32172 https://cve.radiocsirt.org/vuln/gsd-2022-32172 gsd-2022-32172 https://cve.radiocsirt.org/vuln/gsd-2022-32172