https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 19 Oct 2026 15:47:53 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-207529 EUVD-2026-207529 https://cve.radiocsirt.org/vuln/euvd-2026-207529 https://cve.radiocsirt.org/vuln/fkie_cve-2024-55342 <p>A file upload functionality in Piranha CMS 11.1 allows authenticated remote attackers to upload a crafted PDF file to /manager/media. This PDF can contain malicious JavaScript code, which is executed when a victim user opens or interacts with the PDF in their web browser, leading to a XSS vulnerability.</p> <p>A file upload functionality in Piranha CMS 11.1 allows authenticated remote attackers to upload a crafted PDF file to /manager/media. This PDF can contain malicious JavaScript code, which is executed when a victim user opens or interacts with the PDF in their web browser, leading to a XSS vulnerability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-55342 https://cve.radiocsirt.org/vuln/ghsa-cmwp-442x-3rcv <p><strong>Affected:</strong> NuGet: Piranha</p> <p>A file upload functionality in Piranha CMS 11.1 allows authenticated remote attackers to upload a crafted PDF file to /manager/media. This PDF can contain malicious JavaScript code, which is executed when a victim user opens or interacts with the PDF in their web browser, leading to a XSS vulnerability.</p> <p><strong>Affected:</strong> NuGet: Piranha</p> <p>A file upload functionality in Piranha CMS 11.1 allows authenticated remote attackers to upload a crafted PDF file to /manager/media. This PDF can contain malicious JavaScript code, which is executed when a victim user opens or interacts with the PDF in their web browser, leading to a XSS vulnerability.</p> https://cve.radiocsirt.org/vuln/ghsa-cmwp-442x-3rcv