https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 20:34:36 +0000 https://cve.radiocsirt.org/vuln/cnvd-2024-33675 cnvd-2024-33675 https://cve.radiocsirt.org/vuln/cnvd-2024-33675 https://cve.radiocsirt.org/vuln/euvd-2026-3505 EUVD-2026-3505 https://cve.radiocsirt.org/vuln/euvd-2026-3505 https://cve.radiocsirt.org/vuln/fkie_cve-2024-6939 <p>A vulnerability was found in Xinhu RockOA 2.6.3 and classified as problematic. Affected by this issue is the function okla of the file /webmain/public/upload/tpl_upload.html. The manipulation of the argument callback leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-271994 is the identifier assigned to this vulnerability.</p> <p>A vulnerability was found in Xinhu RockOA 2.6.3 and classified as problematic. Affected by this issue is the function okla of the file /webmain/public/upload/tpl_upload.html. The manipulation of the argument callback leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-271994 is the identifier assigned to this vulnerability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-6939 https://cve.radiocsirt.org/vuln/ghsa-wrvx-mjj7-5qf8 <p>A vulnerability was found in Xinhu RockOA 2.6.3 and classified as problematic. Affected by this issue is the function okla of the file /webmain/public/upload/tpl_upload.html. The manipulation of the argument callback leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-271994 is the identifier assigned to this vulnerability.</p> <p>A vulnerability was found in Xinhu RockOA 2.6.3 and classified as problematic. Affected by this issue is the function okla of the file /webmain/public/upload/tpl_upload.html. The manipulation of the argument callback leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-271994 is the identifier assigned to this vulnerability.</p> https://cve.radiocsirt.org/vuln/ghsa-wrvx-mjj7-5qf8