https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 02:37:18 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-252497 EUVD-2026-252497 https://cve.radiocsirt.org/vuln/euvd-2026-252497 https://cve.radiocsirt.org/vuln/fkie_cve-2025-40693 <p>Stored Cross Site Scripting in Online Fire Reporting System v1.2 by PHPGurukul, that consists in a reflected and stored authenticated XSS due to the lack of propper validation of user inputs &#39;tname&#39; parameter via GET and, &#39;teamleadname&#39;, &#39;teammember&#39; and &#39;teamname&#39;</p> <p>parameters via POST at the endpoint &#39;/ofrs/admin/edit-team.php&#39;. This vulnerability could allow a remote user to send a specially crafted query to an authenticated user and steal its cookie session details.</p> <p>Stored Cross Site Scripting in Online Fire Reporting System v1.2 by PHPGurukul, that consists in a reflected and stored authenticated XSS due to the lack of propper validation of user inputs &#39;tname&#39; parameter via GET and, &#39;teamleadname&#39;, &#39;teammember&#39; and &#39;teamname&#39;</p> <p>parameters via POST at the endpoint &#39;/ofrs/admin/edit-team.php&#39;. This vulnerability could allow a remote user to send a specially crafted query to an authenticated user and steal its cookie session details.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-40693 https://cve.radiocsirt.org/vuln/ghsa-29mw-f55p-xcww <p>Stored Cross Site Scripting in Online Fire Reporting System v1.2 by PHPGurukul, that consists in a reflected and stored authenticated XSS due to the lack of propper validation of user inputs &#39;tname&#39; parameter via GET and, &#39;teamleadname&#39;, &#39;teammember&#39; and &#39;teamname&#39;</p> <p>parameters via POST at the endpoint &#39;/ofrs/admin/edit-team.php&#39;. This vulnerability could allow a remote user to send a specially crafted query to an authenticated user and steal its cookie session details.</p> <p>Stored Cross Site Scripting in Online Fire Reporting System v1.2 by PHPGurukul, that consists in a reflected and stored authenticated XSS due to the lack of propper validation of user inputs &#39;tname&#39; parameter via GET and, &#39;teamleadname&#39;, &#39;teammember&#39; and &#39;teamname&#39;</p> <p>parameters via POST at the endpoint &#39;/ofrs/admin/edit-team.php&#39;. This vulnerability could allow a remote user to send a specially crafted query to an authenticated user and steal its cookie session details.</p> https://cve.radiocsirt.org/vuln/ghsa-29mw-f55p-xcww