https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 02:00:04 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-235541 EUVD-2026-235541 https://cve.radiocsirt.org/vuln/euvd-2026-235541 https://cve.radiocsirt.org/vuln/fkie_cve-2022-38724 <p>Silverstripe silverstripe/framework through 4.11.0, silverstripe/assets through 1.11.0, and silverstripe/asset-admin through 1.11.0 allow XSS.</p> <p>Silverstripe silverstripe/framework through 4.11.0, silverstripe/assets through 1.11.0, and silverstripe/asset-admin through 1.11.0 allow XSS.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-38724 https://cve.radiocsirt.org/vuln/ghsa-9cx2-hj6m-fv58 <p><strong>Affected:</strong> Packagist: silverstripe/assets, Packagist: silverstripe/framework</p> <p>A malicious content author could add arbitrary attributes to HTML editor shortcodes which could be used to inject a JavaScript payload on the front end of the site. The shortcode providers that ship with Silverstripe CMS have been reviewed and attribute whitelists have been implemented where appropriate to negate this risk.</p> <p><strong>Affected:</strong> Packagist: silverstripe/assets, Packagist: silverstripe/framework</p> <p>A malicious content author could add arbitrary attributes to HTML editor shortcodes which could be used to inject a JavaScript payload on the front end of the site. The shortcode providers that ship with Silverstripe CMS have been reviewed and attribute whitelists have been implemented where appropriate to negate this risk.</p> https://cve.radiocsirt.org/vuln/ghsa-9cx2-hj6m-fv58 https://cve.radiocsirt.org/vuln/gsd-2022-38724 gsd-2022-38724 https://cve.radiocsirt.org/vuln/gsd-2022-38724