https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 20:18:48 +0000 https://cve.radiocsirt.org/vuln/cnvd-2025-06931 cnvd-2025-06931 https://cve.radiocsirt.org/vuln/cnvd-2025-06931 https://cve.radiocsirt.org/vuln/euvd-2026-223981 EUVD-2026-223981 https://cve.radiocsirt.org/vuln/euvd-2026-223981 https://cve.radiocsirt.org/vuln/fkie_cve-2024-10720 <p>A stored cross-site scripting (XSS) vulnerability exists in phpipam/phpipam version 1.5.2. The vulnerability occurs in the &#39;Device Management&#39; section under &#39;Administration&#39; where an attacker can inject malicious scripts into the &#39;Name&#39; and &#39;Description&#39; fields when adding a new device type. This can lead to data theft, account compromise, distribution of malware, website defacement, and phishing attacks. The issue is fixed in version 1.7.0.</p> <p>A stored cross-site scripting (XSS) vulnerability exists in phpipam/phpipam version 1.5.2. The vulnerability occurs in the &#39;Device Management&#39; section under &#39;Administration&#39; where an attacker can inject malicious scripts into the &#39;Name&#39; and &#39;Description&#39; fields when adding a new device type. This can lead to data theft, account compromise, distribution of malware, website defacement, and phishing attacks. The issue is fixed in version 1.7.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-10720 https://cve.radiocsirt.org/vuln/ghsa-qgm6-wj98-3qh4 <p>A stored cross-site scripting (XSS) vulnerability exists in phpipam/phpipam version 1.5.2. The vulnerability occurs in the &#39;Device Management&#39; section under &#39;Administration&#39; where an attacker can inject malicious scripts into the &#39;Name&#39; and &#39;Description&#39; fields when adding a new device type. This can lead to data theft, account compromise, distribution of malware, website defacement, and phishing attacks. The issue is fixed in version 1.7.0.</p> <p>A stored cross-site scripting (XSS) vulnerability exists in phpipam/phpipam version 1.5.2. The vulnerability occurs in the &#39;Device Management&#39; section under &#39;Administration&#39; where an attacker can inject malicious scripts into the &#39;Name&#39; and &#39;Description&#39; fields when adding a new device type. This can lead to data theft, account compromise, distribution of malware, website defacement, and phishing attacks. The issue is fixed in version 1.7.0.</p> https://cve.radiocsirt.org/vuln/ghsa-qgm6-wj98-3qh4