Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 10:09:12 +0000 EUVD-2026-262171 https://cve.radiocsirt.org/vuln/euvd-2026-262171 EUVD-2026-262171 https://cve.radiocsirt.org/vuln/euvd-2026-262171 fkie_cve-2025-63709 https://cve.radiocsirt.org/vuln/fkie_cve-2025-63709 <p>A Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Simple To-Do List System 1.0 in the &#34;Add Tasks&#34; text input. An authenticated user can submit HTML/JavaScript that is not correctly sanitized or encoded on output. The injected script is stored and later rendered in the browser of any user who views the task, allowing execution of arbitrary script in the context of the victim&#39;s browser.</p> <p>A Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Simple To-Do List System 1.0 in the &#34;Add Tasks&#34; text input. An authenticated user can submit HTML/JavaScript that is not correctly sanitized or encoded on output. The injected script is stored and later rendered in the browser of any user who views the task, allowing execution of arbitrary script in the context of the victim&#39;s browser.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-63709 GHSA-4x55-4jgw-65pj https://cve.radiocsirt.org/vuln/ghsa-4x55-4jgw-65pj <p>A Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Simple To-Do List System 1.0 in the &#34;Add Tasks&#34; text input. An authenticated user can submit HTML/JavaScript that is not correctly sanitized or encoded on output. The injected script is stored and later rendered in the browser of any user who views the task, allowing execution of arbitrary script in the context of the victim&#39;s browser.</p> <p>A Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Simple To-Do List System 1.0 in the &#34;Add Tasks&#34; text input. An authenticated user can submit HTML/JavaScript that is not correctly sanitized or encoded on output. The injected script is stored and later rendered in the browser of any user who views the task, allowing execution of arbitrary script in the context of the victim&#39;s browser.</p> https://cve.radiocsirt.org/vuln/ghsa-4x55-4jgw-65pj