https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 23:35:30 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-207286 EUVD-2026-207286 https://cve.radiocsirt.org/vuln/euvd-2026-207286 https://cve.radiocsirt.org/vuln/fkie_cve-2024-55451 <p>A Stored Cross-Site Scripting (XSS) vulnerability exists in authenticated SVG file upload and viewing functionality in UJCMS 9.6.3. The vulnerability arises from insufficient sanitization of embedded attributes in uploaded SVG files. When a maliciously crafted SVG file is viewed by other backend users, it allows authenticated attackers to execute arbitrary JavaScript in the context of other backend users&#39; browsers, potentially leading to the theft of sensitive tokens.</p> <p>A Stored Cross-Site Scripting (XSS) vulnerability exists in authenticated SVG file upload and viewing functionality in UJCMS 9.6.3. The vulnerability arises from insufficient sanitization of embedded attributes in uploaded SVG files. When a maliciously crafted SVG file is viewed by other backend users, it allows authenticated attackers to execute arbitrary JavaScript in the context of other backend users&#39; browsers, potentially leading to the theft of sensitive tokens.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-55451 https://cve.radiocsirt.org/vuln/ghsa-f3g2-9hcq-jr47 <p>A Stored Cross-Site Scripting (XSS) vulnerability exists in authenticated SVG file upload and viewing functionality in UJCMS 9.6.3. The vulnerability arises from insufficient sanitization of embedded attributes in uploaded SVG files. When a maliciously crafted SVG file is viewed by other backend users, it allows authenticated attackers to execute arbitrary JavaScript in the context of other backend users&#39; browsers, potentially leading to the theft of sensitive tokens.</p> <p>A Stored Cross-Site Scripting (XSS) vulnerability exists in authenticated SVG file upload and viewing functionality in UJCMS 9.6.3. The vulnerability arises from insufficient sanitization of embedded attributes in uploaded SVG files. When a maliciously crafted SVG file is viewed by other backend users, it allows authenticated attackers to execute arbitrary JavaScript in the context of other backend users&#39; browsers, potentially leading to the theft of sensitive tokens.</p> https://cve.radiocsirt.org/vuln/ghsa-f3g2-9hcq-jr47