https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 04:05:29 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-223972 EUVD-2026-223972 https://cve.radiocsirt.org/vuln/euvd-2026-223972 https://cve.radiocsirt.org/vuln/fkie_cve-2024-6986 <p>A Cross-site Scripting (XSS) vulnerability exists in the Settings page of parisneo/lollms-webui version 9.8. The vulnerability is due to the improper use of the &#39;v-html&#39; directive, which inserts the content of the &#39;full_template&#39; variable directly as HTML. This allows an attacker to execute malicious JavaScript code by injecting a payload into the &#39;System Template&#39; input field under main configurations.</p> <p>A Cross-site Scripting (XSS) vulnerability exists in the Settings page of parisneo/lollms-webui version 9.8. The vulnerability is due to the improper use of the &#39;v-html&#39; directive, which inserts the content of the &#39;full_template&#39; variable directly as HTML. This allows an attacker to execute malicious JavaScript code by injecting a payload into the &#39;System Template&#39; input field under main configurations.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-6986 https://cve.radiocsirt.org/vuln/ghsa-4g3f-9mfg-xxgh <p>A Cross-site Scripting (XSS) vulnerability exists in the Settings page of parisneo/lollms-webui version 9.8. The vulnerability is due to the improper use of the &#39;v-html&#39; directive, which inserts the content of the &#39;full_template&#39; variable directly as HTML. This allows an attacker to execute malicious JavaScript code by injecting a payload into the &#39;System Template&#39; input field under main configurations.</p> <p>A Cross-site Scripting (XSS) vulnerability exists in the Settings page of parisneo/lollms-webui version 9.8. The vulnerability is due to the improper use of the &#39;v-html&#39; directive, which inserts the content of the &#39;full_template&#39; variable directly as HTML. This allows an attacker to execute malicious JavaScript code by injecting a payload into the &#39;System Template&#39; input field under main configurations.</p> https://cve.radiocsirt.org/vuln/ghsa-4g3f-9mfg-xxgh