https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 23:15:13 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-198249 EUVD-2026-198249 https://cve.radiocsirt.org/vuln/euvd-2026-198249 https://cve.radiocsirt.org/vuln/fkie_cve-2024-48228 <p>An issue was found in funadmin 5.0.2. The selectfiles method in \backend\controller\sys\Attachh.php directly stores the passed parameters and values into the param parameter without filtering, resulting in Cross Site Scripting (XSS).</p> <p>An issue was found in funadmin 5.0.2. The selectfiles method in \backend\controller\sys\Attachh.php directly stores the passed parameters and values into the param parameter without filtering, resulting in Cross Site Scripting (XSS).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-48228 https://cve.radiocsirt.org/vuln/ghsa-j9wp-x5q5-xh2f <p><strong>Affected:</strong> Packagist: funadmin/funadmin</p> <p>An issue was found in funadmin 5.0.2. The selectfiles method in `\backend\controller\sys\Attachh.php` directly stores the passed parameters and values into the param parameter without filtering, resulting in Cross Site Scripting (XSS).</p> <p><strong>Affected:</strong> Packagist: funadmin/funadmin</p> <p>An issue was found in funadmin 5.0.2. The selectfiles method in `\backend\controller\sys\Attachh.php` directly stores the passed parameters and values into the param parameter without filtering, resulting in Cross Site Scripting (XSS).</p> https://cve.radiocsirt.org/vuln/ghsa-j9wp-x5q5-xh2f