https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 13:02:32 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-226859 EUVD-2026-226859 https://cve.radiocsirt.org/vuln/euvd-2026-226859 https://cve.radiocsirt.org/vuln/fkie_cve-2024-48761 <p>Reflected XSS vulnerability in Celk Sistemas Celk Saude v.3.1.252.1 allows a remote attacker to inject arbitrary JavaScript code via the &#34;erro&#34; parameter.</p> <p>Reflected XSS vulnerability in Celk Sistemas Celk Saude v.3.1.252.1 allows a remote attacker to inject arbitrary JavaScript code via the &#34;erro&#34; parameter.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-48761 https://cve.radiocsirt.org/vuln/ghsa-gpj5-h9pc-v6jc <p>The specific component in Celk Saude 3.1.252.1 that processes user input and returns error messages to the client is vulnerable due to improper validation or sanitization of the &#34;erro&#34; parameter. This parameter appears as a response when incorrect credentials are entered during login. The lack of proper validation or sanitization makes the component susceptible to injection attacks, potentially allowing attackers to manipulate the input and exploit the system.</p> <p>The specific component in Celk Saude 3.1.252.1 that processes user input and returns error messages to the client is vulnerable due to improper validation or sanitization of the &#34;erro&#34; parameter. This parameter appears as a response when incorrect credentials are entered during login. The lack of proper validation or sanitization makes the component susceptible to injection attacks, potentially allowing attackers to manipulate the input and exploit the system.</p> https://cve.radiocsirt.org/vuln/ghsa-gpj5-h9pc-v6jc