https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 22 Oct 2026 23:25:37 +0000 https://cve.radiocsirt.org/vuln/cnvd-2024-11125 cnvd-2024-11125 https://cve.radiocsirt.org/vuln/cnvd-2024-11125 https://cve.radiocsirt.org/vuln/euvd-2026-241838 EUVD-2026-241838 https://cve.radiocsirt.org/vuln/euvd-2026-241838 https://cve.radiocsirt.org/vuln/fkie_cve-2024-23892 <p>A vulnerability has been reported in Cups Easy (Purchase &amp; Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/costcentercreate.php, in the costcenterid parameter. Exploitation of this vulnerability could allow a remote attacker to send a specially crafted URL to an authenticated user and steal their session cookie credentials.</p> <p>A vulnerability has been reported in Cups Easy (Purchase &amp; Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/costcentercreate.php, in the costcenterid parameter. Exploitation of this vulnerability could allow a remote attacker to send a specially crafted URL to an authenticated user and steal their session cookie credentials.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-23892 https://cve.radiocsirt.org/vuln/ghsa-78j2-99c3-5wwp <p>A vulnerability has been reported in Cups Easy (Purchase &amp; Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/costcentercreate.php, in the costcenterid parameter. Exploitation of this vulnerability could allow a remote attacker to send a specially crafted URL to an authenticated user and steal their session cookie credentials.</p> <p>A vulnerability has been reported in Cups Easy (Purchase &amp; Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/costcentercreate.php, in the costcenterid parameter. Exploitation of this vulnerability could allow a remote attacker to send a specially crafted URL to an authenticated user and steal their session cookie credentials.</p> https://cve.radiocsirt.org/vuln/ghsa-78j2-99c3-5wwp https://cve.radiocsirt.org/vuln/gsd-2024-23892 gsd-2024-23892 https://cve.radiocsirt.org/vuln/gsd-2024-23892