Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 01:40:37 +0000 EUVD-2026-251198 https://cve.radiocsirt.org/vuln/euvd-2026-251198 EUVD-2026-251198 https://cve.radiocsirt.org/vuln/euvd-2026-251198 fkie_cve-2024-45965 https://cve.radiocsirt.org/vuln/fkie_cve-2024-45965 <p>Contao before 5.5.6 allows XSS via an SVG document. This affects (in contao/core-bundle in Composer) 4.x before 4.13.54, 5.0.x through 5.3.x before 5.3.30, and 5.4.x and 5.5..x before 5.5.6.</p> <p>Contao before 5.5.6 allows XSS via an SVG document. This affects (in contao/core-bundle in Composer) 4.x before 4.13.54, 5.0.x through 5.3.x before 5.3.30, and 5.4.x and 5.5..x before 5.5.6.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-45965 Withdrawn: GHSA-mrw8-5368-phm3 — Duplicate Advisory: Contao allows admin an account to upload SVG file containing malicious JavaScript https://cve.radiocsirt.org/vuln/ghsa-mrw8-5368-phm3 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Packagist: contao/contao</p> <p>## Duplicate Advisory</p> <p>This advisory has been withdrawn because it is a duplicate of GHSA-vqqr-fgmh-f626. This link is maintained to preserve external references.</p> <p>## Original Description</p> <p>Contao 5.4.1 allows an authenticated admin account to upload a SVG file containing malicious javascript code into the target system. If the file is accessed through the website, it could lead to a Cross-Site Scripting (XSS) attack or execute arbitrary code via a crafted javascript to the target.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Packagist: contao/contao</p> <p>## Duplicate Advisory</p> <p>This advisory has been withdrawn because it is a duplicate of GHSA-vqqr-fgmh-f626. This link is maintained to preserve external references.</p> <p>## Original Description</p> <p>Contao 5.4.1 allows an authenticated admin account to upload a SVG file containing malicious javascript code into the target system. If the file is accessed through the website, it could lead to a Cross-Site Scripting (XSS) attack or execute arbitrary code via a crafted javascript to the target.</p> https://cve.radiocsirt.org/vuln/ghsa-mrw8-5368-phm3