https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 12:37:20 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-258609 EUVD-2026-258609 https://cve.radiocsirt.org/vuln/euvd-2026-258609 https://cve.radiocsirt.org/vuln/fkie_cve-2024-36498 <p>Due to missing input sanitization, an attacker can perform cross-site-scripting attacks and run arbitrary Javascript in the browser of other users. The &#34;Edit Disclaimer Text&#34; function of the configuration menu is vulnerable to stored XSS. Only the users Poweruser and Admin can use this function which is available at the URL</p> <p>https://$SCANNER/cgi/admin.cgi?-rdisclaimer+-apre</p> <p>The stored Javascript payload will be executed every time the ScanWizard is loaded, even in the Kiosk-mode browser. Version 7.40 implemented a fix, but it could be bypassed via URL-encoding the Javascript payload again.</p> <p>Due to missing input sanitization, an attacker can perform cross-site-scripting attacks and run arbitrary Javascript in the browser of other users. The &#34;Edit Disclaimer Text&#34; function of the configuration menu is vulnerable to stored XSS. Only the users Poweruser and Admin can use this function which is available at the URL</p> <p>https://$SCANNER/cgi/admin.cgi?-rdisclaimer+-apre</p> <p>The stored Javascript payload will be executed every time the ScanWizard is loaded, even in the Kiosk-mode browser. Version 7.40 implemented a fix, but it could be bypassed via URL-encoding the Javascript payload again.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-36498 https://cve.radiocsirt.org/vuln/ghsa-33rg-9hjg-3559 <p>Due to missing input sanitization, an attacker can perform cross-site-scripting attacks and run arbitrary Javascript in the browser of other users. The &#34;Edit Disclaimer Text&#34; function of the configuration menu is vulnerable to stored XSS. Only the users Poweruser and Admin can use this function which is available at the URL</p> <p>https://$SCANNER/cgi/admin.cgi?-rdisclaimer+-apre</p> <p>The stored Javascript payload will be executed every time the ScanWizard is loaded, even in the Kiosk-mode browser. Version 7.40 implemented a fix, but it could be bypassed via URL-encoding the Javascript payload again.</p> <p>Due to missing input sanitization, an attacker can perform cross-site-scripting attacks and run arbitrary Javascript in the browser of other users. The &#34;Edit Disclaimer Text&#34; function of the configuration menu is vulnerable to stored XSS. Only the users Poweruser and Admin can use this function which is available at the URL</p> <p>https://$SCANNER/cgi/admin.cgi?-rdisclaimer+-apre</p> <p>The stored Javascript payload will be executed every time the ScanWizard is loaded, even in the Kiosk-mode browser. Version 7.40 implemented a fix, but it could be bypassed via URL-encoding the Javascript payload again.</p> https://cve.radiocsirt.org/vuln/ghsa-33rg-9hjg-3559