https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 05:57:08 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-257862 EUVD-2026-257862 https://cve.radiocsirt.org/vuln/euvd-2026-257862 https://cve.radiocsirt.org/vuln/fkie_cve-2025-27800 <p>The Episerver Content Management System (CMS) by Optimizely was affected by multiple Stored Cross-Site Scripting (XSS) vulnerabilities. This allowed an authenticated attacker to execute malicious JavaScript code in the victim&#39;s browser.</p> <p>The Admin dashboard offered the functionality to add gadgets to the dashboard. This included the &#34;Notes&#34; gadget. An authenticated attacker with the corresponding access rights (such as &#34;WebAdmin&#34;) that was impersonating the victim could insert malicious JavaScript code in these notes that would be executed if the victim visited the dashboard.</p> <p>Affected products: Version 11.X: EPiServer.CMS.Core (&lt;11.21.4) with EPiServer.CMS.UI (&lt;11.37.5), Version 12.X: EPiServer.CMS.Core (&lt;12.22.1) with EPiServer.CMS.UI (&lt;11.37.3)</p> <p>The Episerver Content Management System (CMS) by Optimizely was affected by multiple Stored Cross-Site Scripting (XSS) vulnerabilities. This allowed an authenticated attacker to execute malicious JavaScript code in the victim&#39;s browser.</p> <p>The Admin dashboard offered the functionality to add gadgets to the dashboard. This included the &#34;Notes&#34; gadget. An authenticated attacker with the corresponding access rights (such as &#34;WebAdmin&#34;) that was impersonating the victim could insert malicious JavaScript code in these notes that would be executed if the victim visited the dashboard.</p> <p>Affected products: Version 11.X: EPiServer.CMS.Core (&lt;11.21.4) with EPiServer.CMS.UI (&lt;11.37.5), Version 12.X: EPiServer.CMS.Core (&lt;12.22.1) with EPiServer.CMS.UI (&lt;11.37.3)</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-27800 https://cve.radiocsirt.org/vuln/ghsa-9p6h-f8wj-744p <p>The Episerver Content Management System (CMS) by Optimizely was affected by multiple Stored Cross-Site Scripting (XSS) vulnerabilities. This allowed an authenticated attacker to execute malicious JavaScript code in the victim&#39;s browser.</p> <p>The Admin dashboard offered the functionality to add gadgets to the dashboard. This included the &#34;Notes&#34; gadget. An authenticated attacker with the corresponding access rights (such as &#34;WebAdmin&#34;) that was impersonating the victim could insert malicious JavaScript code in these notes that would be executed if the victim visited the dashboard.</p> <p>Affected products: Version 11.X: EPiServer.CMS.Core (&lt;11.21.4) with EPiServer.CMS.UI (&lt;11.37.5), Version 12.X: EPiServer.CMS.Core (&lt;12.22.1) with EPiServer.CMS.UI (&lt;11.37.3)</p> <p>The Episerver Content Management System (CMS) by Optimizely was affected by multiple Stored Cross-Site Scripting (XSS) vulnerabilities. This allowed an authenticated attacker to execute malicious JavaScript code in the victim&#39;s browser.</p> <p>The Admin dashboard offered the functionality to add gadgets to the dashboard. This included the &#34;Notes&#34; gadget. An authenticated attacker with the corresponding access rights (such as &#34;WebAdmin&#34;) that was impersonating the victim could insert malicious JavaScript code in these notes that would be executed if the victim visited the dashboard.</p> <p>Affected products: Version 11.X: EPiServer.CMS.Core (&lt;11.21.4) with EPiServer.CMS.UI (&lt;11.37.5), Version 12.X: EPiServer.CMS.Core (&lt;12.22.1) with EPiServer.CMS.UI (&lt;11.37.3)</p> https://cve.radiocsirt.org/vuln/ghsa-9p6h-f8wj-744p