https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 16:34:37 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-243319 EUVD-2026-243319 https://cve.radiocsirt.org/vuln/euvd-2026-243319 https://cve.radiocsirt.org/vuln/fkie_cve-2025-28073 <p>phpList before 3.6.15 is vulnerable to Reflected Cross-Site Scripting (XSS) via the /lists/dl.php endpoint. An attacker can inject arbitrary JavaScript code by manipulating the id parameter, which is improperly sanitized.</p> <p>phpList before 3.6.15 is vulnerable to Reflected Cross-Site Scripting (XSS) via the /lists/dl.php endpoint. An attacker can inject arbitrary JavaScript code by manipulating the id parameter, which is improperly sanitized.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-28073 https://cve.radiocsirt.org/vuln/ghsa-4pgh-326f-32p3 <p>phpList 3.6.3 is vulnerable to Reflected Cross-Site Scripting (XSS) via the /lists/dl.php endpoint. An attacker can inject arbitrary JavaScript code by manipulating the id parameter, which is improperly sanitized.</p> <p>phpList 3.6.3 is vulnerable to Reflected Cross-Site Scripting (XSS) via the /lists/dl.php endpoint. An attacker can inject arbitrary JavaScript code by manipulating the id parameter, which is improperly sanitized.</p> https://cve.radiocsirt.org/vuln/ghsa-4pgh-326f-32p3