https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 13 Oct 2026 04:06:20 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-00572 bdu:2025-00572 https://cve.radiocsirt.org/vuln/bdu:2025-00572 https://cve.radiocsirt.org/vuln/drupal-contrib-2024-067 <p><strong>Affected:</strong> Packagist:https://packages.drupal.org/8: drupal/miniorange_oauth_client</p> <p>This module enables you to authenticate users through an Identity Provider (IdP) or OAuth Server, allowing them to log in to your Drupal site.</p> <p>The module does not sufficiently escape query parameters sent to the callback URL when displaying error messages, particularly if the code parameter is missing in the response.</p> <p><strong>Affected:</strong> Packagist:https://packages.drupal.org/8: drupal/miniorange_oauth_client</p> <p>This module enables you to authenticate users through an Identity Provider (IdP) or OAuth Server, allowing them to log in to your Drupal site.</p> <p>The module does not sufficiently escape query parameters sent to the callback URL when displaying error messages, particularly if the code parameter is missing in the response.</p> https://cve.radiocsirt.org/vuln/drupal-contrib-2024-067 https://cve.radiocsirt.org/vuln/euvd-2026-210004 EUVD-2026-210004 https://cve.radiocsirt.org/vuln/euvd-2026-210004 https://cve.radiocsirt.org/vuln/fkie_cve-2024-13301 <p>Improper Neutralization of Input During Web Page Generation (&#39;Cross-site Scripting&#39;) vulnerability in Drupal OAuth &amp; OpenID Connect Single Sign On – SSO (OAuth/OIDC Client) allows Cross-Site Scripting (XSS).This issue affects OAuth &amp; OpenID Connect Single Sign On – SSO (OAuth/OIDC Client): from 3.0.0 before 3.44.0, from 4.0.0 before 4.0.19.</p> <p>Improper Neutralization of Input During Web Page Generation (&#39;Cross-site Scripting&#39;) vulnerability in Drupal OAuth &amp; OpenID Connect Single Sign On – SSO (OAuth/OIDC Client) allows Cross-Site Scripting (XSS).This issue affects OAuth &amp; OpenID Connect Single Sign On – SSO (OAuth/OIDC Client): from 3.0.0 before 3.44.0, from 4.0.0 before 4.0.19.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-13301 https://cve.radiocsirt.org/vuln/ghsa-f6r6-892j-cp9p <p>Improper Neutralization of Input During Web Page Generation (&#39;Cross-site Scripting&#39;) vulnerability in Drupal OAuth &amp; OpenID Connect Single Sign On – SSO (OAuth/OIDC Client) allows Cross-Site Scripting (XSS).This issue affects OAuth &amp; OpenID Connect Single Sign On – SSO (OAuth/OIDC Client): from 3.0.0 before 3.44.0, from 4.0.0 before 4.0.19.</p> <p>Improper Neutralization of Input During Web Page Generation (&#39;Cross-site Scripting&#39;) vulnerability in Drupal OAuth &amp; OpenID Connect Single Sign On – SSO (OAuth/OIDC Client) allows Cross-Site Scripting (XSS).This issue affects OAuth &amp; OpenID Connect Single Sign On – SSO (OAuth/OIDC Client): from 3.0.0 before 3.44.0, from 4.0.0 before 4.0.19.</p> https://cve.radiocsirt.org/vuln/ghsa-f6r6-892j-cp9p