Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 07:20:46 +0000 EUVD-2026-212454 https://cve.radiocsirt.org/vuln/euvd-2026-212454 EUVD-2026-212454 https://cve.radiocsirt.org/vuln/euvd-2026-212454 fkie_cve-2024-56923 https://cve.radiocsirt.org/vuln/fkie_cve-2024-56923 <p>Stored Cross-Site Scripting (XSS) Vulnerability in the Categorization Option of My Subscriptions Functionality in Silverpeas Core 6.3.1 &lt;= 6.4.1 allows a remote attacker to execute arbitrary JavaScript code. This is achieved by injecting a malicious payload into the Name field of a subscription. The attack can lead to session hijacking, data theft, or unauthorized actions when an admin user views the affected subscription.</p> <p>Stored Cross-Site Scripting (XSS) Vulnerability in the Categorization Option of My Subscriptions Functionality in Silverpeas Core 6.3.1 &lt;= 6.4.1 allows a remote attacker to execute arbitrary JavaScript code. This is achieved by injecting a malicious payload into the Name field of a subscription. The attack can lead to session hijacking, data theft, or unauthorized actions when an admin user views the affected subscription.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-56923 GHSA-788m-27g4-cf86 — Cross site scripting in Silverpeas Core https://cve.radiocsirt.org/vuln/ghsa-788m-27g4-cf86 <p><strong>Affected:</strong> Maven: org.silverpeas.core:silverpeas-core</p> <p>Stored Cross-Site Scripting (XSS) Vulnerability in the Categorization Option of My Subscriptions Functionality in Silverpeas Core 6.3.1 &lt;= 6.4.1 allows a remote attacker to execute arbitrary JavaScript code. This is achieved by injecting a malicious payload into the Name field of a subscription. The attack can lead to session hijacking, data theft, or unauthorized actions when an admin user views the affected subscription.</p> <p><strong>Affected:</strong> Maven: org.silverpeas.core:silverpeas-core</p> <p>Stored Cross-Site Scripting (XSS) Vulnerability in the Categorization Option of My Subscriptions Functionality in Silverpeas Core 6.3.1 &lt;= 6.4.1 allows a remote attacker to execute arbitrary JavaScript code. This is achieved by injecting a malicious payload into the Name field of a subscription. The attack can lead to session hijacking, data theft, or unauthorized actions when an admin user views the affected subscription.</p> https://cve.radiocsirt.org/vuln/ghsa-788m-27g4-cf86