https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 21 Oct 2026 00:34:01 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-215261 EUVD-2026-215261 https://cve.radiocsirt.org/vuln/euvd-2026-215261 https://cve.radiocsirt.org/vuln/fkie_cve-2025-24012 <p>Umbraco is a free and open source .NET content management system. Starting in version 14.0.0 and prior to versions 14.3.2 and 15.1.2, authenticated users are able to exploit a cross-site scripting vulnerability when viewing certain localized backoffice components. Versions 14.3.2 and 15.1.2 contain a patch.</p> <p>Umbraco is a free and open source .NET content management system. Starting in version 14.0.0 and prior to versions 14.3.2 and 15.1.2, authenticated users are able to exploit a cross-site scripting vulnerability when viewing certain localized backoffice components. Versions 14.3.2 and 15.1.2 contain a patch.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-24012 https://cve.radiocsirt.org/vuln/ghsa-wv8v-rmw2-25wc <p><strong>Affected:</strong> NuGet: Umbraco.Cms.StaticAssets, npm: @umbraco-cms/backoffice</p> <p>### Impact Authenticated users are able to exploit an XSS vulnerability when viewing certain localized backoffice components.</p> <p>### Patches Will be patched in 14.3.2 and 15.1.2.</p> <p>Note: This issue was reported by Pratik Patil from NetSPI @Nexusss-ppatil</p> <p><strong>Affected:</strong> NuGet: Umbraco.Cms.StaticAssets, npm: @umbraco-cms/backoffice</p> <p>### Impact Authenticated users are able to exploit an XSS vulnerability when viewing certain localized backoffice components.</p> <p>### Patches Will be patched in 14.3.2 and 15.1.2.</p> <p>Note: This issue was reported by Pratik Patil from NetSPI @Nexusss-ppatil</p> https://cve.radiocsirt.org/vuln/ghsa-wv8v-rmw2-25wc