https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 18:16:12 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-204805 EUVD-2026-204805 https://cve.radiocsirt.org/vuln/euvd-2026-204805 https://cve.radiocsirt.org/vuln/fkie_cve-2023-50924 <p>Englesystem is a shift planning system for chaos events. Engelsystem prior to v3.4.1 performed insufficient validation of user supplied data for the DECT number, mobile number, and work-log comment fields. The values of those fields would be displayed in corresponding log overviews, allowing the injection and execution of Javascript code in another user&#39;s context. This vulnerability enables an authenticated user to inject Javascript into other user&#39;s sessions. The injected JS will be executed during normal usage of the system when viewing, e.g., overview pages. This issue has been fixed in version 3.4.1.</p> <p>Englesystem is a shift planning system for chaos events. Engelsystem prior to v3.4.1 performed insufficient validation of user supplied data for the DECT number, mobile number, and work-log comment fields. The values of those fields would be displayed in corresponding log overviews, allowing the injection and execution of Javascript code in another user&#39;s context. This vulnerability enables an authenticated user to inject Javascript into other user&#39;s sessions. The injected JS will be executed during normal usage of the system when viewing, e.g., overview pages. This issue has been fixed in version 3.4.1.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-50924 https://cve.radiocsirt.org/vuln/gsd-2023-50924 gsd-2023-50924 https://cve.radiocsirt.org/vuln/gsd-2023-50924